Skip to content
Scammers.com

Search results

5 reports for “Firebase or web.app-hosted phishing pages (13 Nov 2026 cluster)”

Searched by keyword.

PhishingReviewed

Firebase redirect stub track-lx92f9.firebaseapp.com sends visitors to bank, post and customs phishing kit

ScanMalware posted on X on 13 November 2026 that track-lx92f9[.]firebaseapp[.]com is a "CONFIRMED SCAM". Its analysis says the Firebase page is an empty stub that automatically redirects visitors to a Codeanywhere dev…

  • track-lx92f9.firebaseapp.com
  • Redirects to port-3000-2986758970-lasybug6855273.codeanyapp.com (Codeanywhere container)
  • Firebase or web.app-hosted phishing pages (13 Nov 2026 cluster)
Reported Nov 13, 20261 report
Screenshot of a French-language fake 'you have received a PDF document' page asking for an email address and password
PhishingReviewed

French 'you have received a PDF document' credential-harvesting page at file-greview.web.app

urlDNA flagged hxxps://file-greview[.]web[.]app as possible phishing on Mastodon on 13 November 2026. Its screenshot shows a French-language page saying "Vous avez reçu un document" (you have received a document) with…

  • file-greview.web.app
  • Firebase (web.app) subdomain; French-language fake document-share login
  • Webmail or email-account credential phishing (13 Nov 2026)
Reported Nov 13, 20261 report
PhishingReviewed

Fake Banque Socredo 'Espace Client WEBSOC' page at web-soc.firebaseapp.com

urlDNA flagged hxxps://web-soc[.]firebaseapp[.]com as possible phishing on Mastodon on 13 November 2026. Its screenshot shows a page branded as Banque Socredo, the French Polynesian bank, promoting the features of the…

  • web-soc.firebaseapp.com
  • Firebase-hosted page copying Socredo's WEBSOC online banking ('J'active mon Socredo')
  • Firebase or web.app-hosted phishing pages (13 Nov 2026 cluster)
Reported Nov 13, 20261 report
Crypto, investment & PonziReviewed

Wallet-drainer page multi-xchange.firebaseapp.com poses as WalletLink connection service

ScanMalware posted on X on 12 November 2026 that multi-xchange[.]firebaseapp[.]com is a confirmed scam. Its scan report describes a wallet-drainer phishing page posing as WalletLink, a wallet-connection brand, on a fr…

  • multi-xchange.firebaseapp.com
  • Firebase subdomain; Telegram bot token in page script
  • Crypto wallet phishing, drainers and address-poisoning cluster (12 Nov 2026)
Reported Nov 12, 20261 report
Toll & delivery text (smishing)Reviewed

Fake ELTA Hellenic Post parcel page eltapackage.firebaseapp.com sends data to a Telegram bot

Website scanner ScanMalware posted on X on 11 November 2026 a "confirmed scam" verdict for eltapackage[.]firebaseapp[.]com. Its linked report says the page, titled "ΕΛΤΑ - Αποστολή πακέτων" (ELTA - parcel shipping), i…

  • eltapackage.firebaseapp.com
  • Hosted on shared firebaseapp.com domain; page title 'ΕΛΤΑ - Αποστολή πακέτων'
  • Phishing kit exfiltrating to a Telegram bot (12 Nov 2026)
Reported Nov 11, 20261 report

Results reflect reports submitted to Scammers.com. Entries marked “Unverified” have not yet been reviewed. A listing is not a finding that any person or business committed fraud.