This isn't a real file-sharing service. wgcondominiums-detail.surge.sh is a phishing page designed to steal your email login credentials. The site asks you to sign in with Office365, Outlook, or another email provider, but it's a trick. Legitimate file-sharing services don't need you to log in through a random page on a free hosting platform. Google Safe Browsing has already flagged it for social engineering, and there's no company information, no privacy policy, and no way to contact anyone running it. The domain blocks search engines from indexing it, which is another red flag. If you're wondering whether wgcondominiums-detail.surge.sh is a scam, the answer is yes. Do not enter any login details on this site. If you've already done so, change your email password immediately and enable two-factor authentication.
No — wgcondominiums-detail.surge.sh doesn't look safe
In plain English
This site is a phishing trap. It's designed to steal your email login credentials by pretending to be a file-sharing service. Google has flagged it for social engineering, and there's no legitimate business behind it. Stay away.
What you should do now
Don't panic. These steps limit the damage, and the sooner you take them the better.
Don't enter any details
No passwords, card numbers or personal information — even if the site looks professional.
Close the tab
Especially if you got here from an email, text message or social media ad.
Already paid? Call your bank
Contact your bank or card provider right away. They can often stop or reverse a recent payment.
Warn others
Report the site and share this check with anyone who sent you the link.
Where the score comes from
Google Safe Browsing flagged this site for social engineering, which is a clear sign it's designed to trick visitors into handing over credentials. The valid SSL certificate doesn't change that.
The site is a subdomain on a free hosting platform with no ownership information available. There's no way to know who set it up, which is typical for quick-hit phishing pages.
No web history, no social proof, and a direct Safe Browsing flag. The site has no track record because it's likely a fresh, throwaway phishing operation.
There's no about page, no branding, and no real contact details. The only 'contact' found is a pretence of a file-sharing interface that asks for your email login.
A site that asks for login credentials should have a privacy policy and terms of service. This one has none, which is a huge red flag for any site handling sensitive data.
The site runs on a basic static host with no security headers and blocks all search engine crawlers. That's a setup made to avoid detection, not to serve legitimate users.
What we checked
Think this verdict is wrong?
Site owners can request a fresh scan. Scores update automatically as signals change.