public company · US
Alphabet Inc.
Search, Gmail and cloud services.
- Primary official domain
- google.com
- Reviewed official domains
- 5 (directory review; organization has not verified)
- Directory source
- BreachScout directory · Suggest a correction
What we watch for
Hostnames in phishing feeds and certificate logs are matched on these brand tokens; feed target labels are matched on the aliases. Generated spellings (typos, lure words, look-alike characters, other top-level domains) are derived from the official domains and tokens and checked against feeds, certificate logs and DNS.
Official domains and email policies
Domains reviewed as belonging to Google. DMARC helps receivers check the From domain; lookalike domains remain possible. Published policies cannot confirm actual mail configuration or receiver behavior.
| Domain | Relationship | Evidence | DMARC policy | Policy source | SPF | Reporting | DKIM | MTA-STS | Last check | |
|---|---|---|---|---|---|---|---|---|---|---|
| abc.xyz | primaryReviewed — | Portfolio directory (wikidata_cik+financedb_ticker) | Not checked | Not checked | Not checked | Not checked | Not checked | Not checked | Not checked | Not checked |
| google.com | primaryReviewed 2026-10-18 | DomainSpoof directory (seed) | Not checked | Not checked | Not checked | Not checked | Not checked | Not checked | Not checked | Not checked |
| gmail.com | subsidiaryReviewed 2026-10-18 | DomainSpoof directory (seed) | Not checked | Not checked | Not checked | Not checked | Not checked | Not checked | Not checked | Not checked |
| goo.gl | subsidiaryReviewed 2026-10-18 | DomainSpoof directory (seed) | Not checked | Not checked | Not checked | Not checked | Not checked | Not checked | Not checked | Not checked |
| youtube.com | subsidiaryReviewed 2026-10-18 | DomainSpoof directory (seed) | Not checked | Not checked | Not checked | Not checked | Not checked | Not checked | Not checked | Not checked |
“Not checked”: no check yet (mail, DKIM and MTA-STS facts were added later, so older checks show “Not checked” for them). “Lookup failed”: DNS result unknown. DKIM is probed at a fixed list of common selectors only. Report mailbox names are redacted.
Reports on official domains appear under “Official assets with reports” on the Reported matches tab.