{"success":true,"data":{"id":"cloud-storage-quota-phish","label":"Fake cloud storage quota exceeded / upgrade lure — \"your storage is 98% full, upgrade now\"; real quota alerts come from within the authenticated app (Google Drive / OneDrive / Dropbox), not cold inbound email.","description":"Fake cloud storage quota exceeded or upgrade lure — \"your Google Drive / OneDrive / Dropbox storage is 98% full, upgrade now or lose your files.\" Real cloud storage quota alerts come from within the authenticated app and authenticated email from the verified platform domain; cold inbound email with an upgrade payment CTA is credential-harvest or payment fraud. Detection: storage quota/storage full/files will be deleted vocabulary + upgrade storage/buy more storage/increase quota CTA + no List-Unsubscribe + no In-Reply-To + not protected sender. Trash score: +3. Source: GC1-R19; Google/Microsoft security advisory; APWG cloud storage phishing trend 2025.","tier":"danger","category":"phishing","isThin":false}}