public company · US

Google

Alphabet Inc.

Search, Gmail and cloud services.

Primary official domain
google.com
Reviewed official domains
5 (directory review; organization has not verified)
Directory source
BreachScout directory · Suggest a correction
Matching domains, 30 days
118
registrable domains containing the brand; source date or last feed observation
First source-reported, 30 days
5
domains first source-reported within 30 days
First observed, 30 days
138
domains first observed by DomainSpoof in feeds
Email policy (primary domain)
Not checked
No email-policy check yet

What we watch for

Hostnames in phishing feeds and certificate logs are matched on these brand tokens; feed target labels are matched on the aliases. Generated spellings (typos, lure words, look-alike characters, other top-level domains) are derived from the official domains and tokens and checked against feeds, certificate logs and DNS.

Brand tokens
gmailgoogleyoutube
Label aliases
Gmail · Google · YouTube
Official domains
abc.xyz · google.com · gmail.com · goo.gl · youtube.com (all)
Generated spellings
378 tracked · 160 observed somewhere · 218 not observed (all)

Matching domains with source reports or listings

Source claims are shown separately from our company matches. Default scope: brand in hostname. Choose “All associations” to include source-labelled matches on other sites.

Domain / hostnameSource claimCompany match (DomainSpoof)Date (mixed basis)Latest DNSSources / recordsFinding details
google[.]comunicazioni-sicure[.]itMail: MXSPFDMARC · via comunicazioni-sicure.it · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive34.240.138.15552.48.92.20654.77.191.63checked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
conference-google-meet[.]liveMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive172.67.214.192104.21.24.22606:4700:3035::ac43:d6c02606:4700:3031::6815:1802checked 2026-10-19 04:49 UTC
1 source · 1 recordDetails
cyrca-inc-googlemeet-interview[.]coMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive216.198.79.1checked 2026-10-19 04:49 UTC
1 source · 1 recordDetails
delegations-google[.]comMail: MXSPFDMARC · via delegations-google.com · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive179.236.79.48checked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
deviceverify-google[.]comMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive104.21.13.67172.67.198.1522606:4700:3030::ac43:c6982606:4700:3031::6815:d43checked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
docs-google[.]comMail: MXSPFDMARC · via sendgrid.net · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive150.171.109.72checked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
ecpa49-gmail[.]comMail: MXSPFDMARC · via webador.com · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive35.204.150.5checked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
google-jobs-verify[.]esk-sic[.]deMail: MXSPFDMARC · via outlook.com · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive67.205.154.99checked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
accounts[.]google[.]cygn[.]eu[.]org2 hostnames under eu.orgMail: MXSPFDMARC · via eu.org · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive104.21.91.36172.67.209.1302606:4700:3031::6815:5b242606:4700:3033::ac43:d182checked 2026-10-19 04:55 UTC
1 source · 1 recordDetails
meet[.]googleapps[.]eu[.]org
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive66.33.60.19476.76.21.93checked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
gmail-ssl[.]comMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
NXDOMAINchecked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
gmail-transfer[.]comMail: MXSPFDMARC · via gmail-transfer.com · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive159.100.6.19checked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
gmailcookiee[.]icuMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive104.21.88.43172.67.172.1362606:4700:3032::ac43:ac882606:4700:3036::6815:582bchecked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
google-apk[.]comMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive104.21.59.34172.67.211.2412606:4700:3035::6815:3b222606:4700:3035::ac43:d3f1checked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
google-dou-james5475[.]comMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
NXDOMAINchecked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
google-finance-aibot[.]comMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive104.21.35.160172.67.177.1602606:4700:3032::ac43:b1a02606:4700:3036::6815:23a0checked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
google-flights[.]club2 hostnames under google-flights.clubMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
NXDOMAINchecked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
www[.]google-flights[.]club
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
NXDOMAINchecked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
google-meet-call[.]comMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
NXDOMAINchecked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
google-meet[.]globalMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive153.75.86.243checked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
google-miner[.]comMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive104.21.81.58172.67.157.432606:4700:3032::ac43:9d2b2606:4700:3035::6815:513achecked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
google-playstore[.]clickMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive185.158.133.1checked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
google-review-management[.]comMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive104.21.60.106172.67.195.2012606:4700:3032::ac43:c3c92606:4700:3033::6815:3c6achecked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
us[.]google-reviewcards[.]comMail: SPFDMARC · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive185.158.133.1checked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
google[.]jl[.]cnMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive38.95.75.43checked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
google[.]js[.]cnMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive38.95.75.43checked 2026-10-19 04:54 UTC
1 source · 1 recordDetails
google1107[.]comMail: No mail records · checked 2026-10-19
Listed by PhishDestroyPresent in latest snapshot
Possible associationBrand in hostname
2026-10-19Observed in feed
Alive104.21.6.7172.67.134.322606:4700:3033::6815:6072606:4700:3033::ac43:8620checked 2026-10-19 04:54 UTC
1 source · 1 recordDetails

A feed listing or DNS answer alone cannot confirm current phishing. Removal from a feed does not confirm resolution.