PhishingReviewed
Firebase redirect stub track-lx92f9.firebaseapp.com sends visitors to bank, post and customs phishing kit
ScanMalware posted on X on 13 November 2026 that track-lx92f9[.]firebaseapp[.]com is a "CONFIRMED SCAM". Its analysis says the Firebase page is an empty stub that automatically redirects visitors to a Codeanywhere dev…
- track-lx92f9.firebaseapp.com
- Redirects to port-3000-2986758970-lasybug6855273.codeanyapp.com (Codeanywhere container)
- Firebase or web.app-hosted phishing pages (13 Nov 2026 cluster)
Reported Nov 13, 20261 report