Cloud storage flagged for hosting phishing content?

[Adam Geisen]

I have a web app that I built about 4 years ago for a state association I work for to track and distribute micro-credentials to its members. I'm using Firebase Cloud Storage to handle the uploads that the members provide as evidence. It's an internal app, and we create accounts for users. Plus, the storage is locked down through security rules, so users must be logged in in order to upload files. It only accepts .xlsx, .docx, and .pdf files. But this week, Google flagged it saying it's hosting phishing content and we can't view uploads without getting the big red "This is dangerous content" screen. I've submitted an appeal, and I've tried asking which files are the ones causing the problem. I haven't received anything back regarding either one. It just says to delete the bad files. We have thousands of uploaded files and I have no idea where to look. And I have no idea what to look for.

Has anyone else seen this issue and solved it? We don't pay the $25/mo for advanced support which I don't want to do, but is that my only option? Thanks in advance for any help.

Adam Geisen