Risk Level: CRITICAL — Threat Score: 100/100

Assessment: firebasestorage.googleapis.com is actively hosting 40 malware URLs across 15 resolved IP addresses. The number of active endpoints suggests ongoing, organized malware distribution. This domain should be blocked at the DNS or firewall level. Malware families associated with this domain include AgentTesla, hta, VIPKeylogger.

Recommendation: Block immediately at DNS and firewall level

Total Malware URLs: 90 — Active: 40 — Resolved IPs: 15 — Abuse Reports: 28

First Seen: 2025-09-19T06:56:08 — Last Online: 2026-07-27T01:36:05

firebasestorage.googleapis.com has been associated with 90 malware URLs , of which 40 are currently active . The primary threat types are malware_download.

Active threat. This domain is currently serving malicious content. Multiple malware URLs have been identified on this domain. Network administrators should consider blocking this domain or monitoring traffic to it closely.

Associated malware families include: AgentTesla.