Google AMP Is Being Used to Hide Phishing Pages

The security issue with this of course is if you are using your Gmail Google account for any kind of authentication activity and meaning that you for example configured it as a password reset email. The blog post by Google also doesn't state if another user will immediately be able to register that particular account or if there is sort of some kind of cooling off period where the account is deleted but can no longer be registered by another user. And sitting with Google here for a second story co-fence has a report with details how the Google accelerated mobile pages or AMP service is being used to hide phishing pages.