Risk Level: CRITICAL — Threat Score: 100/100

Assessment: firebasestorage.googleapis.com is actively hosting 47 malware URLs across 19 resolved IP addresses. The number of active endpoints suggests ongoing, organized malware distribution. This domain should be blocked at the DNS or firewall level. Malware families associated with this domain include AgentTesla, powershell, RemcosRAT.

Recommendation: Block immediately at DNS and firewall level

Total Malware URLs: 100 — Active: 47 — Resolved IPs: 19 — Abuse Reports: 99

First Seen: 2025-09-19T06:56:08 — Last Online: 2026-10-12T02:25:38

firebasestorage.googleapis.com has been associated with 100 malware URLs , of which 47 are currently active . The primary threat types are malware_download.

Active threat. This domain is currently serving malicious content. Multiple malware URLs have been identified on this domain. Network administrators should consider blocking this domain or monitoring traffic to it closely.

Associated malware families include: AgentTesla.