Cloud Storage Payment Declined Phishing Scam
A "catch-all" phishing scam not mentioning any specific cloud storage platform but urging you to submit bank account payment details to their fake page. They claim to be emailing from a Cloud storage and yet the email address gives the name Cloud-Stockage such sloppiness would not be present if this was a genuine payment declined email for an online account.
E-Mails received:
Date: 10/11/2025, 14:50
From: CIoud-Stockage noreply@project-22-64d52.firebaseapp.com
To: [Name and E-Mail address redacted]
Reply To: support@cloudstoragse.us
Subject: Re:, Payment DecIined
Notes: The sender email address domain is suspicious in that firebaseapp.com addresses are usually used by web application developers not by an accounts department. Similarly the reply to address support@cloudstoragse.us uses the less common .us (united states) domain name extension and gives a mis-spelled domain name.
The click through web address is... https://stckg.blob.core.windows.net/dcim/google.com#8999665/002gz/120/short/128058/41/77/?u=855599695 which is unlikely for a genuine commercial website page.
Recommendation:
Just delete the e-mail, don't click on any links.
More examples:
Michael Fowler
Other articles by Michael Fowler:
Renewal of W-8BEN Certification Phishing Scam - Michael Fowler
"Our compliance team has identified that your certification has expired or will soon expire. To remain in compliance, you must renew your documentation immediately" That as it may be but the email coming from an email address welcome@zykxdj.com seems suspicious... more >>
DVLA Phishing Scam - Michael Fowler
On first glance this email appears to have come from DVLA the Driver Licencing Authority in the UK but examine the sender email address, inconsistencies in the email and the click through web address and this is a scam email designed to capture your bank debit card details... more >>
Interactive Brokers Phishing Scam - Michael Fowler
I never cease to be amazed at the range of legitimate companies scammers choose to imitate to lure their customers into entering their personal details into a fake phishing website... more >>