Security Scan Report: storage.googleapis.com

Redirected to:
https://airlogdwor.shop/pages/[email protected]
Submitted: Completed: publiccompleted
This website contacted 20 IPs in 2 countries across 13 domains to perform 18 HTTP transactions. The main domain is googleapis.com and was registered 21 years ago.

Submitted URL: https://storage.googleapis.com/mwebza/index.html#[email protected]

Effective URL:
https://airlogdwor.shop/pages/[email protected]
Redirected

The Cisco Umbrella rank of the primary domain is #236 of the top 1 million websitesTop 1K Site

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

Confirmed phishing: a fake 'Urlfile Mail System' login on airlogdwor.shop, loaded from a Google Cloud Storage bucket, harvests email/password and exfiltrates them to a Telegram bot. Never enter credentials.

Risk Factors (5)
Credential-harvesting login form (1 password + 1 email field) on a domain that is not the brand's official domain
Brand impersonation of 'Urlfile' mail system
Credential exfiltration to an attacker-controlled Telegram bot
Victim email address injected in the URL fragment
Cloud-storage hosted page redirecting cross-domain to an unrelated .shop domain
Domain age information unavailable

Details

Page Title

Urlfile- MAIL SYSTEM Sign in to continue

Scan Type

public

Domain Name Analysis

You're looking at domain 'storage.googleapis.com' on the commercial generic top-level domain (.com); it also runs on subdomain 'storage'. The registrable portion 'googleapis' spans 10 characters with 5 vowels and five consonants. Segmentation suggests two words: google, apis. Average segment length settles at 5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://storage.googleapis.com/mwebza/index.html#sales@urlfile.com

Page Load Overview

0.47s
Total Load Time
545 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:67%
Script:Latin
Direction:ltr

Detection Details

Text Length:125 chars
Detector Agreement:67%

Website Classification

Primary Category

technology software49% confidence
Type: webapp
Method: ml+structural

All Detected Categories

technology software
49%
documentation technical
41%
government public service
27%
news media journalism
26%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
18142.251.20.207Google · CDNUnited States
AS15169Google LLC
0151.101.129.155Fastly · CDNUnited States
AS54113Fastly, Inc.
0104.18.11.207Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0142.251.110.95Google · CDNUnited States
AS15169Google LLC
0107.175.50.39Los Angeles, California, United States
AS36352HostPapa
0142.251.156.119Google · CDNUnited States
AS15169Google LLC
0104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0142.251.14.95Google · CDNUnited States
AS15169Google LLC
0104.17.207.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
0146.75.120.193Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
1820--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1D5011E4F3E04E58E86320CC5F9F6B05D9826617A6081CCDDB1AEC6655B003CFAC3B880

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

24:kW6E3YOMilOUMoV1ATNb1L8dCUURNVOM0nJsVoNcaj:T6E3+cOUb4ICL0Jmozj

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:833:AAAEEAAAIAAAAAAAAAgAAABAMAAACAAAAAAQQAAQAAAAAAAAEAAAwQAAAAAAAAAAAAAGAgAAQAAACCAAEEAAAAAAAAAQAAAA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffe7ffe7e7ffe7e3
Perceptual Hash:e6996498669ac99e
Difference Hash:2028324c4c30284c
Wavelet Hash:dfc7dbc3c0c8c0c0
Color Hash:#4c783a

Other Hashes

Crop Resistant:2028324c4c30284c

Scan History

Scan history not available

Unable to load historical scan data