public company · US
Alphabet Inc.
Search, Gmail and cloud services.
- Primary official domain
- google.com
- Reviewed official domains
- 5 (directory review; organization has not verified)
- Directory source
- BreachScout directory · Suggest a correction
Matching domains, 30 days
118
registrable domains containing the brand; source date or last feed observation
First source-reported, 30 days
5
domains first source-reported within 30 days
First observed, 30 days
138
domains first observed by DomainSpoof in feeds
Email policy (primary domain)
Not checked
No email-policy check yet
What we watch for
Hostnames in phishing feeds and certificate logs are matched on these brand tokens; feed target labels are matched on the aliases. Generated spellings (typos, lure words, look-alike characters, other top-level domains) are derived from the official domains and tokens and checked against feeds, certificate logs and DNS.
- Brand tokens
- gmailgoogleyoutube
- Label aliases
- Gmail · Google · YouTube
- Official domains
- abc.xyz · google.com · gmail.com · goo.gl · youtube.com (all)
- Generated spellings
- 400 tracked · 109 observed somewhere · 291 not observed (all)
- Can receive mail
- 40 spellings and 23 reported domains publish MX records · mail at Google 10 · Microsoft 365 5 · Above.com parking (parking placeholder) 4 · 35 more (95 spellings and 118 reported domains of the last 30 days checked; MX shows the domain can receive mail, not who operates it)
Matching domains with source reports or listings
Source claims are shown separately from our company matches. Default scope: brand in hostname. Choose “All associations” to include source-labelled matches on other sites.
| Domain / hostname | Source claim | Company match (DomainSpoof) | Date (mixed basis) | Latest DNS | Sources / records | Finding details |
|---|---|---|---|---|---|---|
meetsing-google[.]comMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive104.21.42.15CloudflareCloudflare (AS13335) · US172.67.155.25CloudflareCloudflare (AS13335) · US2606:4700:3032::6815:2a0fCloudflareCloudflare (AS13335) · US2606:4700:3037::ac43:9b19CloudflareCloudflare (AS13335) · USchecked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
gmail-account-recovery[.]microtool[.]devMail: MXSPF · checked 2026-10-19mail at Cloudflare Email Routing (mail forwarding) · sends via Cloudflare Email Routing | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive104.21.0.172CloudflareCloudflare (AS13335) · US172.67.128.36CloudflareCloudflare (AS13335) · US2606:4700:3035::ac43:8024CloudflareCloudflare (AS13335) · US2606:4700:3037::6815:acCloudflareCloudflare (AS13335) · USchecked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
mirror-google[.]comMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive104.21.35.190CloudflareCloudflare (AS13335) · US172.67.178.214CloudflareCloudflare (AS13335) · US2606:4700:3030::6815:23beCloudflareCloudflare (AS13335) · US2606:4700:3035::ac43:b2d6CloudflareCloudflare (AS13335) · USchecked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
mobile-google[.]cnMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive47.57.5.134Alibaba CloudAlibaba Cloud (AS45102) · CNchecked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
moriarty-youtube[.]vipMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive43.159.98.104ACE-AS-AP ACE (AS139341) · SG43.159.99.10ACE-AS-AP ACE (AS139341) · SGchecked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
o1google[.]comMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive104.21.13.200CloudflareCloudflare (AS13335) · US172.67.157.83CloudflareCloudflare (AS13335) · US2606:4700:3030::ac43:9d53CloudflareCloudflare (AS13335) · US2606:4700:3032::6815:dc8CloudflareCloudflare (AS13335) · USchecked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
play-google[.]camMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive46.17.175.122HostingerHostinger (AS47583) · CYchecked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
playgoogle-store[.]appMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive104.21.5.205CloudflareCloudflare (AS13335) · US172.67.133.212CloudflareCloudflare (AS13335) · US2606:4700:3032::6815:5cdCloudflareCloudflare (AS13335) · US2606:4700:3033::ac43:85d4CloudflareCloudflare (AS13335) · USchecked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
google[.]pp[.]ruMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive77.91.115.99ORG-LVA15-AS (AS50867) · NLchecked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
proservicealademande971-gmail[.]comMail: MXSPFDMARC · checked 2026-10-19mail at Webador (web / mail hosting) · DMARC policy none (monitor only) · sends via Webador | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive35.204.150.5Google CloudGoogle Cloud (AS396982) · US5.150.204.35.bc.googleusercontent.comchecked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
rb88-google[.]com[.]cnMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive172.247.153.69POWERLINE-AS-AP POWER LINE DATACENTER (AS132839) · HKchecked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
roomgooglelive[.]networkMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | NXDOMAINchecked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
rp-google[.]comMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive209.99.184.226 · Emerging Threats open block listSKN-NETWORK-1 - SKN Subnet & Telecom Ltd (AS402253) · KNchecked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
safe-gmail[.]comMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive58.64.137.69HKBNESL-AS-AP HKBN Enterprise Solutions Limited (AS17444) · HKchecked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
google-for-jobs-verify[.]schilling-domke[.]deMail: MXSPFDMARC · checked 2026-10-19mail at IONOS (web / mail hosting) · DMARC policy none (monitor only) · sends via IONOS | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive67.205.154.99DigitalOceanDigitalOcean (AS14061) · USchecked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
accounts[.]google[.]com[.]search[.]er[.]inMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive34.194.55.251Amazon Web ServicesAmazon Web Services (AS14618) · USec2-34-194-55-251.compute-1.amazonaws.comchecked 2026-10-19 04:55 UTC | 1 source · 1 record | Details |
secure-googledrive[.]comMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive64.181.217.59Oracle CloudOracle Cloud (AS31898) · USchecked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
sites1-google[.]comMail: MXSPFDMARC · checked 2026-10-19mail at Webador (web / mail hosting) · DMARC policy none (monitor only) · sends via Webador | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive35.204.150.5Google CloudGoogle Cloud (AS396982) · US5.150.204.35.bc.googleusercontent.comchecked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
bugfix-sbb-8868-google-pay-express-empty-shipping-address[.]snappy-shopper-snappy-v1[.]snappygroupdev[.]co[.]ukMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive13.41.46.35Amazon Web ServicesAmazon Web Services (AS16509) · USec2-13-41-46-35.eu-west-2.compute.amazonaws.comchecked 2026-10-19 10:50 UTC | 1 source · 1 record | Details |
support-google[.]plMail: MXSPFDMARC · checked 2026-10-19mail at support-google.pl · DMARC policy quarantine | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive85.128.244.69NETARTGROUP (AS15967) · PLshared-aoi69.rev.nazwa.plchecked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
updates-google[.]comMail: MXSPFDMARC · checked 2026-10-19mail at mail.updates-google.com · DMARC policy reject | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive64.181.217.59Oracle CloudOracle Cloud (AS31898) · USchecked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
vault-google[.]comMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive104.21.19.118CloudflareCloudflare (AS13335) · US172.67.186.35CloudflareCloudflare (AS13335) · US2606:4700:3031::ac43:ba23CloudflareCloudflare (AS13335) · US2606:4700:3033::6815:1376CloudflareCloudflare (AS13335) · USchecked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
verifydevice-google[.]comMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive104.21.93.196CloudflareCloudflare (AS13335) · US172.67.214.50CloudflareCloudflare (AS13335) · US2606:4700:3030::6815:5dc4CloudflareCloudflare (AS13335) · US2606:4700:3037::ac43:d632CloudflareCloudflare (AS13335) · USchecked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
webmeet-google[.]coMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | Alive216.126.239.76ROUTERHOSTING (AS14956) · US76.239.126.216.static.cloudzy.comchecked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
webmeet-google[.]comMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-19Observed in feed | NXDOMAINchecked 2026-10-19 04:54 UTC | 1 source · 1 record | Details |
118 registrable domains · 120 hostnames · page 4 of 5← PreviousNext →
A feed listing or DNS answer alone cannot confirm current phishing. Removal from a feed does not confirm resolution.