https://googledrive.com is Google! It's hosted with Google drive (like dropbox can do). So this is one case where it would pay not to use the same domain, actually.

Edit: Also important because that way password autofill won't automatically fill in your details.

That's a major security flaw.

On the plus side, looks like your report worked. As of a few minutes after you posted, the link says it's a phishing scam.

Actually that's a feature, now anyone can host a simple webpage without any hassle the fact that this dude figured out a way around it is kinda cool but I'd rather they not remove this bec of phishing attacks.

On the other hand I can see how THIS specific attack is very dangerous: people might assume that they need to login to google to see the content hosted by google....