logstorage[.]in

This domain, logstorage.in, poses a significant risk as it impersonates Google, aiming to deceive users into divulging sensitive information such as login credentials. The threat is categorized as brand impersonation, which involves creating a website that mimics the appearance and functionality of a legitimate brand to trick users into trusting it.

Analysis indicates that logstorage.in was registered through Endurance International Group India Private Limited on February 19, 2025. The domain resolves to the IP address 142.251.154.119, which is located in the Netherlands and is part of the AS49453 Global Layer B.V. network. According to VirusTotal, 18 out of 95 security vendors flag this domain as malicious. Additionally, the SSL certificate is issued by Let's Encrypt, which, while legitimate, is often used by malicious actors to lend an air of authenticity to their sites. The domain appears on one security blocklist and has been taken offline by PhishDestroy.

If a user visited logstorage.in, they should immediately check their Google account for any unauthorized activity. It is recommended to change the password and enable two-factor authentication (2FA) if not already active. Users should also monitor their financial statements and credit reports for any signs of fraud. Reporting the incident to Google's security team can help in taking further action and preventing others from falling victim to this threat.