indicatordomain
chh1-ac0a3-default-rtdb[.]firebaseio[.]com
- First seen
- 2026-05-14
- Last seen
- 2026-05-14
- Sightings
- 1
Posts referencing this indicator
- Fake call logs, real payments: How CallPhantom tricks Android users
Firebase C&C domain used by CallPhantom