# GCP Project 823560469881 (fars-next) — Full Enumeration
# Date: Feb 28, 2026
# Target: Fars News Agency (IRGC) — ir.farsnews.next APK
# API Key: AIzaSyDp9K7YksfYf-JvGOS7YCNv7JbA9P-XemE

## FIREBASE INSTALLATION (CRITICAL)
# Successfully registered a device in the IRGC Firebase project

Installation Response:
{
  "name": "projects/823560469881/installations/fWHh5X5IsUmmdtGGLQOV9H",
  "fid": "fWHh5X5IsUmmdtGGLQOV9H",
  "refreshToken": "3_AS3qfwIZEFw2_ld1jYfT_AO2834pt03vGFgh-zZeE0Emv1wp06DSnvealH7jYxeyY9TNVtQFeVUG_Ipor8-fuSmWmgpiIy-BD82seRpSSJ6jpsk",
  "authToken": {
    "token": "eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCJ9.eyJhcHBJZCI6IjE6ODIzNTYwNDY5ODgxOmFuZHJvaWQ6YTJlNDk0YWMwMDNhMjk2OWMzODNhOCIsImV4cCI6MTc3Mjg3NDg5MiwiZmlkIjoiZldIaDVYNUlzVW1tZHRHR0xRT1Y5SCIsInByb2plY3ROdW1iZXIiOjgyMzU2MDQ2OTg4MX0.AB2LPV8wRAIgc3ngJJmpf1gaFRW4YiOy-tuUExNOOvdqDLyuWuUzYO0CIAc8byn_O8Nae_2b5LXt-qWpfJWgxO_UXUwNie9cglPf",
    "expiresIn": "604800s"
  }
}

JWT Decoded Payload:
{"appId":"1:823560469881:android:a2e494ac003a2969c383a8","exp":1772874892,"fid":"fWHh5X5IsUmmdtGGLQOV9H","projectNumber":823560469881}

## FCM PUSH TOKEN (CRITICAL)
# Registered to receive push notifications from the IRGC Fars News app

token=fWHh5X5IsUmmdtGGLQOV9H:APA91bGR8MteNn9o6dTbOtWRxVZoJsuNNN0hiNTZWo9sUnDTDWtR-mmXslzoE8IQif3aV06C8fFX792G7wq2DTA02gYlxPI_tlEZJLJG5jqIGmBLzMNzsUg

Registration parameters:
  X-subtype=823560469881
  sender=823560469881
  X-gmp_app_id=1:823560469881:android:a2e494ac003a2969c383a8
  app=ir.farsnews.next
  device=4853801490421017489

## GCM DEVICE REGISTRATION
{"device_data_version_info":"ABFEt1UVO74kwFBysG3LZBaLRyMv_BlM_HPu1Mtmig9KoaSmdL5Z1LjsAjnRe0CCzN7LqCcOeKA7Aj2S7CCCoX5SF8hvRsuuleYxmyV7KU0v1VotLL0LFB-P1QBO7IpUVW__FkIWPKisFR54Ru4RKSK8AzGCYbuhMcgh-5VxAyQ7fu4T2zXCrex5LOhz5BKCvQ7BVaoT6vOimRlxA_iYOnbz57-Yuys34jM6mbD7Q15il_VZJoVqGNs","stats_ok":true,"security_token":1176940086212703190,"time_msec":1772270160455,"version_info":"8xBjBH7PxjYQoLPgN7e-uDAzpIg4yhk","android_id":4853801490421017489}

## FIREBASE REMOTE CONFIG
# Accessible but empty
{"state":"NO_TEMPLATE"}

## FIREBASE DYNAMIC LINKS
# API enabled but not configured
Error: "Your project (823560469881) has not configured Dynamic Links."

## FIREBASE LOGGING QOS
{"nextRequestWaitMillis":"900000","qosTier":{"qosTierConfiguration":[{"logSourceName":"ANDROID_BACKUP","qosTier":"DEFAULT"},{"logSourceName":"BATTERY_STATS","qosTier":"DEFAULT"},{"logSourceName":"SMART_SETUP","qosTier":"DEFAULT"},{"logSourceName":"TRON","qosTier":"DEFAULT"}],"qosTierFingerprint":"-3334737594024971225"},"logSourceBatchingDenylist":{}}

## PUB/SUB — ENABLED
# Returns 403 PERMISSION_DENIED (not "API not enabled")
# Accepts both project ID 823560469881 and project name "fars-next"
{"error":{"code":403,"message":"User not authorized to perform this action.","status":"PERMISSION_DENIED"}}

## DISABLED/NOT CONFIGURED APIS
# These confirm project 823560469881 in error messages

Google Places API (New): SERVICE_DISABLED
  "Places API (New) has not been used in project 823560469881"
  consumer: "projects/823560469881"
  containerInfo: "823560469881"

Firebase App Check API: SERVICE_DISABLED
  "Firebase App Check API has not been used in project 823560469881"

Google Maps Geocoding: NOT activated
  "This API is not activated on your API project"

Firebase Auth (Identity Toolkit): CONFIGURATION_NOT_FOUND (all endpoints)
Firebase RTDB: 404 (fars-next.firebaseio.com not configured)
Cloud Firestore: 404 (no default database)
Firebase Storage: NoSuchBucket (fars-next.appspot.com doesn't exist)

## OAUTH-ONLY APIS (need OAuth2, API key not supported)
Cloud Functions, Cloud Build, BigQuery, Compute Engine, Cloud Run,
Cloud SQL, GKE, Secret Manager, App Engine, Resource Manager,
App Distribution, FCM v1, Remote Config v1, IID info

## KEY FINDINGS
1. Firebase project is LIVE and accepting new device registrations
2. API key is UNRESTRICTED — no domain/package/IP restrictions
3. Pub/Sub is the only GCP service showing active access control (403 vs 401)
4. No Firebase Auth configured — app likely uses its own auth system
5. No RTDB/Firestore/Storage — suggests minimal Firebase usage (analytics + push notifications only)
6. Dynamic Links API enabled but never configured — possible abandoned feature