public company · US
Alphabet Inc.
Search, Gmail and cloud services.
- Primary official domain
- google.com
- Reviewed official domains
- 5 (directory review; organization has not verified)
- Directory source
- BreachScout directory · Suggest a correction
Matching domains, 30 days
125
registrable domains containing the brand; source date or last feed observation
First source-reported, 30 days
5
domains first source-reported within 30 days
First observed, 30 days
145
domains first observed by DomainSpoof in feeds
Email policy (primary domain)
DMARC reject
SPF ~all · 1/10 lookups · Mail: Receives mail (1 MX host) · checked 2026-10-20 · published policy
What we watch for
Hostnames in phishing feeds and certificate logs are matched on these brand tokens; feed target labels are matched on the aliases. Generated spellings (typos, lure words, look-alike characters, other top-level domains) are derived from the official domains and tokens and checked against feeds, certificate logs and DNS.
- Brand tokens
- gmailgoogleyoutube
- Label aliases
- Gmail · Google · YouTube
- Official domains
- abc.xyz · google.com · gmail.com · goo.gl · youtube.com (all)
- Generated spellings
- 400 tracked · 114 observed somewhere · 286 not observed (all)
- Can receive mail
- 43 spellings and 25 reported domains publish MX records · mail at Google 10 · Microsoft 365 5 · Above.com parking (parking placeholder) 4 · 40 more (114 spellings and 125 reported domains of the last 30 days checked; MX shows the domain can receive mail, not who operates it)
Matching domains with source reports or listings
Source claims are shown separately from our company matches. Default scope: brand in hostname. Choose “All associations” to include source-labelled matches on other sites.
| Domain / hostname | Source claim | Company match (DomainSpoof) | Date (mixed basis) | Latest DNS | Sources / records | Finding details |
|---|---|---|---|---|---|---|
093201-google[.]comMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-20Observed in feed | NXDOMAINchecked 2026-10-19 20:50 UTC | 1 source · 1 record | Details |
1-google[.]com[.]cnMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-20Observed in feed | Alive43.135.26.201 · Confirmed phishing host address (DomainSpoof, 48 hours)Tencent CloudTencent Cloud (AS132203) · CNchecked 2026-10-19 23:10 UTC | 1 source · 1 record | Details |
3-google[.]com[.]cnMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-20Observed in feed | Alive43.135.26.201 · Confirmed phishing host address (DomainSpoof, 48 hours)Tencent CloudTencent Cloud (AS132203) · CNchecked 2026-10-19 23:10 UTC | 1 source · 1 record | Details |
345934-google[.]comMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-20Observed in feed | NXDOMAINchecked 2026-10-19 21:05 UTC | 1 source · 1 record | Details |
4-google[.]com[.]cnMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-20Observed in feed | Alive43.135.26.201 · Confirmed phishing host address (DomainSpoof, 48 hours)Tencent CloudTencent Cloud (AS132203) · CNchecked 2026-10-19 23:10 UTC | 1 source · 1 record | Details |
481021-google[.]comMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-20Observed in feed | Alive104.21.37.227CloudflareCloudflare (AS13335) · US172.67.214.170CloudflareCloudflare (AS13335) · US2606:4700:3032::ac43:d6aaCloudflareCloudflare (AS13335) · US2606:4700:3034::6815:25e3CloudflareCloudflare (AS13335) · USchecked 2026-10-19 23:10 UTC | 1 source · 1 record | Details |
5-google[.]com[.]cnMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-20Observed in feed | Alive43.135.26.201 · Confirmed phishing host address (DomainSpoof, 48 hours)Tencent CloudTencent Cloud (AS132203) · CNchecked 2026-10-19 23:10 UTC | 1 source · 1 record | Details |
54314-google[.]comMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-20Observed in feed | Alive13.248.213.45Amazon Web ServicesAmazon Web Services (AS16509) · USa67c48129651a0940.awsglobalaccelerator.com76.223.67.189Amazon Web ServicesAmazon Web Services (AS16509) · USa67c48129651a0940.awsglobalaccelerator.comchecked 2026-10-19 23:10 UTC | 1 source · 1 record | Details |
7-google[.]com[.]cnMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-20Observed in feed | Alive43.135.26.201 · Confirmed phishing host address (DomainSpoof, 48 hours)Tencent CloudTencent Cloud (AS132203) · CNchecked 2026-10-19 23:10 UTC | 1 source · 1 record | Details |
784982-google[.]comMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-20Observed in feed | Alive104.21.24.219CloudflareCloudflare (AS13335) · US172.67.220.219CloudflareCloudflare (AS13335) · US2606:4700:3031::6815:18dbCloudflareCloudflare (AS13335) · US2606:4700:3034::ac43:dcdbCloudflareCloudflare (AS13335) · USchecked 2026-10-19 23:10 UTC | 1 source · 1 record | Details |
8-google[.]com[.]cnMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-20Observed in feed | Alive43.135.26.201 · Confirmed phishing host address (DomainSpoof, 48 hours)Tencent CloudTencent Cloud (AS132203) · CNchecked 2026-10-19 23:10 UTC | 1 source · 1 record | Details |
9-google[.]com[.]cnMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-20Observed in feed | Alive43.135.26.201 · Confirmed phishing host address (DomainSpoof, 48 hours)Tencent CloudTencent Cloud (AS132203) · CNchecked 2026-10-19 23:10 UTC | 1 source · 1 record | Details |
accountrecover-google[.]comMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-20Observed in feed | Alive104.21.40.136CloudflareCloudflare (AS13335) · US172.67.152.4CloudflareCloudflare (AS13335) · US2606:4700:3033::6815:2888CloudflareCloudflare (AS13335) · US2606:4700:3034::ac43:9804CloudflareCloudflare (AS13335) · USchecked 2026-10-19 23:10 UTC | 1 source · 1 record | Details |
adwords-google[.]ruMail: No mail records · checked 2026-10-20 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-20Observed in feed | Alive99.83.176.46Amazon Web ServicesAmazon Web Services (AS16509) · USa44fc39dcd01d2028.awsglobalaccelerator.comchecked 2026-10-20 00:10 UTC | 1 source · 1 record | Details |
antigravity-google-site[.]comMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-20Observed in feed | Alive104.21.88.229CloudflareCloudflare (AS13335) · US172.67.153.182CloudflareCloudflare (AS13335) · US2606:4700:3030::ac43:99b6CloudflareCloudflare (AS13335) · US2606:4700:3031::6815:58e5CloudflareCloudflare (AS13335) · USchecked 2026-10-19 23:10 UTC | 1 source · 1 record | Details |
antigravity-ide-google[.]comMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-20Observed in feed | Alive104.21.71.93CloudflareCloudflare (AS13335) · US172.67.170.80CloudflareCloudflare (AS13335) · US2606:4700:3032::ac43:aa50CloudflareCloudflare (AS13335) · US2606:4700:3037::6815:475dCloudflareCloudflare (AS13335) · USchecked 2026-10-19 23:10 UTC | 1 source · 1 record | Details |
api16-google[.]comMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-20Observed in feed | Alive89.127.235.10 · Confirmed phishing host address (DomainSpoof, 48 hours)THE-1984-AS (AS44925) · ISvps-89-127-235-10.1984.ischecked 2026-10-19 23:10 UTC | 1 source · 1 record | Details |
apk-google[.]cnMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-20Observed in feed | Alive47.57.138.67 · Confirmed phishing host address (DomainSpoof, 48 hours)Alibaba CloudAlibaba Cloud (AS45102) · CNchecked 2026-10-19 23:10 UTC | 1 source · 1 record | Details |
google[.]apple-cl0ud[.]comMail: MXSPFDMARC · checked 2026-10-19mail at pmail.apple-cl0ud.com · DMARC policy reject | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-20Observed in feed | Alive34.240.138.155Amazon Web ServicesAmazon Web Services (AS16509) · USec2-34-240-138-155.eu-west-1.compute.amazonaws.com52.48.92.206Amazon Web ServicesAmazon Web Services (AS16509) · USec2-52-48-92-206.eu-west-1.compute.amazonaws.com54.77.191.63Amazon Web ServicesAmazon Web Services (AS16509) · USec2-54-77-191-63.eu-west-1.compute.amazonaws.comchecked 2026-10-19 23:00 UTC | 1 source · 1 record | Details |
auth-google[.]meMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-20Observed in feed | Alive104.21.13.101CloudflareCloudflare (AS13335) · US172.67.199.210CloudflareCloudflare (AS13335) · US2606:4700:3032::6815:d65CloudflareCloudflare (AS13335) · US2606:4700:3033::ac43:c7d2CloudflareCloudflare (AS13335) · USchecked 2026-10-19 23:00 UTC | 1 source · 1 record | Details |
google-kyc[.]autobotrobotics[.]comMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-20Observed in feed | Alive93.127.194.183 · Confirmed phishing host address (DomainSpoof, 48 hours)HostingerHostinger (AS47583) · CYsrv1935621.hstgr.cloudchecked 2026-10-19 23:00 UTC | 1 source · 1 record | Details |
c1google[.]comMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-20Observed in feed | Alive104.21.38.171CloudflareCloudflare (AS13335) · US172.67.137.11CloudflareCloudflare (AS13335) · US2606:4700:3035::6815:26abCloudflareCloudflare (AS13335) · US2606:4700:3035::ac43:890bCloudflareCloudflare (AS13335) · USchecked 2026-10-19 23:00 UTC | 1 source · 1 record | Details |
ch-google[.]ccMail: No mail records · checked 2026-10-19 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-20Observed in feed | Alive8.212.18.107 · Confirmed phishing host address (DomainSpoof, 48 hours)Alibaba CloudAlibaba Cloud (AS45102) · CNchecked 2026-10-19 23:00 UTC | 1 source · 1 record | Details |
chromedosk-google[.]com[.]cnMail: No mail records · checked 2026-10-20 | Listed by PhishDestroyPresent in latest snapshot | Possible associationBrand in hostname | 2026-10-20Observed in feed | Alive104.21.22.133CloudflareCloudflare (AS13335) · US172.67.205.22CloudflareCloudflare (AS13335) · US2606:4700:3030::6815:1685CloudflareCloudflare (AS13335) · US2606:4700:3037::ac43:cd16CloudflareCloudflare (AS13335) · USchecked 2026-10-20 00:10 UTC | 1 source · 1 record | Details |
| 1 name with the very common brand name 'gmail' (shown on request) | ||||||
125 registrable domains · 127 hostnames · page 1 of 5Next →
A feed listing or DNS answer alone cannot confirm current phishing. Removal from a feed does not confirm resolution.