# Phishing sites impersonating Gmail PhishDestroy has recorded 378 phishing domains impersonating Gmail since 2025-07-09, 56 of them in the last 30 days. The most used registrars are Dynadot and Cloudflare; the most common TLDs are .com and .xyz. The official Gmail domain is gmail.com: any other site asking for your login or wallet is not Gmail. 378Domains, all time 56Last 30 days 281Online at last check 131Confirmed takedowns ## New domains in the last 90 days Gmail phishing domains detected per day: 140 from 2026-07-25 to 2026-10-22; peak 10. ## How to tell a fake Gmail site Official domains: gmail.com, google.com. Words most often added to the brand in reported domains: airdropsalert, airsdropalert, airsdropsalert, multiplier, land, hub, airdrpalert, trzr, megaeth, wallet. - Type the address yourself or use a bookmark; phishing links for Gmail arrive through ads, search results, direct messages and fake support accounts. - Check the full domain before you sign in: look for extra words, hyphens, a different TLD or look-alike letters. - Gmail does not ask you to confirm your password or card details through a link in an email or SMS. Paste a suspicious address into the [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker) or check it against the [DestroyList](https://phishdestroy.io/developer-tools/destroylist-check). ## Latest Gmail phishing domains The 50 most recently detected domains impersonating Gmail Domain | First detected | Status at last check | Registrar | [donupex.com](https://phishdestroy.io/domain/donupex.com/) | 2026-10-21 | Online | Dynadot | [karkiapps.com](https://phishdestroy.io/domain/karkiapps.com/) | 2026-10-21 | Online | Cloudflare | [anssolutionng.com](https://phishdestroy.io/domain/anssolutionng.com/) | 2026-10-21 | Online | PublicDomainRegistry.com | [anpserwis.live](https://phishdestroy.io/domain/anpserwis.live/) | 2026-10-21 | Online | Dynadot | [akrammillstore.com](https://phishdestroy.io/domain/akrammillstore.com/) | 2026-10-21 | Online | PublicDomainRegistry.com | [alberomeble.live](https://phishdestroy.io/domain/alberomeble.live/) | 2026-10-20 | Online | Dynadot | [adaptaresudest.com](https://phishdestroy.io/domain/adaptaresudest.com/) | 2026-10-20 | Online | GoDaddy.com | [aerosky.be](https://phishdestroy.io/domain/aerosky.be/) | 2026-10-20 | Online | Registrar.eu | [zukong.xyz](https://phishdestroy.io/domain/zukong.xyz/) | 2026-10-20 | Online | Spaceship | [australianarmouredmodels.com](https://phishdestroy.io/domain/australianarmouredmodels.com/) | 2026-10-20 | Online | GoDaddy.com | [compliance-educational-resources.com](https://phishdestroy.io/domain/compliance-educational-resources.com/) | 2026-10-19 | Offline | Spaceship | [instander.org.pk](https://phishdestroy.io/domain/instander.org.pk/) | 2026-10-19 | Online | — | [24gmail.net](https://phishdestroy.io/domain/24gmail.net/) | 2026-10-19 | Online | Cloudflare | [crystala.top](https://phishdestroy.io/domain/crystala.top/) | 2026-10-19 | Online | NameMart | [familienwelpen.com](https://phishdestroy.io/domain/familienwelpen.com/) | 2026-10-18 | Online | Name.com | [jetztlegalschnell.de](https://phishdestroy.io/domain/jetztlegalschnell.de/) | 2026-10-18 | Online | — | [originallegalschnell.de](https://phishdestroy.io/domain/originallegalschnell.de/) | 2026-10-18 | Online | — | [hrcke.com](https://phishdestroy.io/domain/hrcke.com/) | 2026-10-17 | Offline | Dominet (HK) | [codepsn.top](https://phishdestroy.io/domain/codepsn.top/) | 2026-10-17 | Online | NAMECHEAP | [bloomsbycarolina.com](https://phishdestroy.io/domain/bloomsbycarolina.com/) | 2026-10-17 | Online | Gransy, s.r.o | [realpikashow.com](https://phishdestroy.io/domain/realpikashow.com/) | 2026-10-16 | Online | Porkbun | [mediatorwork.com](https://phishdestroy.io/domain/mediatorwork.com/) | 2026-10-16 | Online | Registrar.eu | [sailor-lending.com](https://phishdestroy.io/domain/sailor-lending.com/) | 2026-10-15 | Online | GoDaddy.com | [adanzyeyapi.com](https://phishdestroy.io/domain/adanzyeyapi.com/) | 2026-10-15 | Online | IHS Telekom | [szlxskj.com](https://phishdestroy.io/domain/szlxskj.com/) | 2026-10-15 | Online | HiChina (www.net.cn) | [help.steampowered.com.im](https://phishdestroy.io/domain/help.steampowered.com.im/) | 2026-10-15 | Online | Redacted | [qkbzp.com](https://phishdestroy.io/domain/qkbzp.com/) | 2026-10-15 | Online | HiChina (www.net.cn) | [turmericgold.uk](https://phishdestroy.io/domain/turmericgold.uk/) | 2026-10-15 | Online | PublicDomainRegistry.com | [bitcvc.com](https://phishdestroy.io/domain/bitcvc.com/) | 2026-10-14 | Online | Hello Internet | [gethoverswap.xyz](https://phishdestroy.io/domain/gethoverswap.xyz/) | 2026-10-13 | Online | NameSilo | [googalagoogala.cfd](https://phishdestroy.io/domain/googalagoogala.cfd/) | 2026-10-13 | Online | NICENIC | [lesecuries-du-masdigau.fr](https://phishdestroy.io/domain/lesecuries-du-masdigau.fr/) | 2026-10-11 | Online | OVH | [demo3.gdavietnam.com](https://phishdestroy.io/domain/demo3.gdavietnam.com/) | 2026-10-11 | Online | Onlinenic | [dienmaynghiaphat.com](https://phishdestroy.io/domain/dienmaynghiaphat.com/) | 2026-10-11 | Online | P.A. Viet Nam | [erdemirinsaat.net](https://phishdestroy.io/domain/erdemirinsaat.net/) | 2026-10-11 | Online | GoDaddy.com | [lamacosmetics.com](https://phishdestroy.io/domain/lamacosmetics.com/) | 2026-10-11 | Online | HOSTINGER operations | [3drendering.net](https://phishdestroy.io/domain/3drendering.net/) | 2026-10-11 | Online | NameSilo | [kefalosrestaurant-lassi.com](https://phishdestroy.io/domain/kefalosrestaurant-lassi.com/) | 2026-10-11 | Online | ENOM | [limrasindia.com](https://phishdestroy.io/domain/limrasindia.com/) | 2026-10-11 | Online | HOSTINGER operations | [hgfitness.info](https://phishdestroy.io/domain/hgfitness.info/) | 2026-10-10 | Online | NameCheap | [fromjoy.fr](https://phishdestroy.io/domain/fromjoy.fr/) | 2026-10-10 | Online | SCALEWAY | [alamdarinternational.com](https://phishdestroy.io/domain/alamdarinternational.com/) | 2026-10-10 | Online | BigRock Solutions | [emranweb.net](https://phishdestroy.io/domain/emranweb.net/) | 2026-10-10 | Online | Purple IT | [gasperpuntar.com](https://phishdestroy.io/domain/gasperpuntar.com/) | 2026-10-10 | Online | joker.com | [proservicealademande971-gmail.com](https://phishdestroy.io/domain/proservicealademande971-gmail.com/) | 2026-10-10 | Online | Registrar.eu | [go88bet.me](https://phishdestroy.io/domain/go88bet.me/) | 2026-10-09 | Online | Spaceship | [almaei-hr.com](https://phishdestroy.io/domain/almaei-hr.com/) | 2026-10-08 | Online | 1API | [bungkoos.com](https://phishdestroy.io/domain/bungkoos.com/) | 2026-10-08 | Online | HOSTINGER operations | [foreignmartbd.com](https://phishdestroy.io/domain/foreignmartbd.com/) | 2026-10-07 | Online | Realtime Register | [beatfortrip.xyz](https://phishdestroy.io/domain/beatfortrip.xyz/) | 2026-10-07 | Online | NICENIC | [All 378 Gmail reports](https://phishdestroy.io/domain/?brand=Gmail) ## Where they are registered and hosted ### Registrars - [Dynadot](https://phishdestroy.io/registrar/dynadot/)54 - Cloudflare39 - [Gname.com](https://phishdestroy.io/registrar/name-com/)24 - [GoDaddy.com](https://phishdestroy.io/registrar/godaddy/)22 - [NICENIC](https://phishdestroy.io/registrar/nicenic/)18 - [NameCheap](https://phishdestroy.io/registrar/namecheap/)11 - [HOSTINGER operations](https://phishdestroy.io/registrar/hostinger/)11 - [Trustname.com](https://phishdestroy.io/registrar/trustname/)11 ### Top-level domains - [.com](https://phishdestroy.io/tld/com/)138 - [.xyz](https://phishdestroy.io/tld/xyz/)28 - [.live](https://phishdestroy.io/tld/live/)21 - [.click](https://phishdestroy.io/tld/click/)19 - [.cfd](https://phishdestroy.io/tld/cfd/)17 - [.net](https://phishdestroy.io/tld/net/)17 - [.dev](https://phishdestroy.io/tld/dev/)14 - [.app](https://phishdestroy.io/tld/app/)11 ### Hosting networks - GOOGLE, US96 - Cloudflare, Inc.57 - CLOUDFLARENET, US22 - Amazon.com, Inc.19 - NEBULA-GLOBAL - Nebula Global LLC, US13 - HONG KONG KOWLOON TELECOMMUNICATIONS CO.,LIMITED11 - Hostinger International Limited10 - CLOUDFLARENET - Cloudflare, Inc., US8 ## Related - [Typosquatting](https://phishdestroy.io/glossary/typosquatting/) - [Homoglyph](https://phishdestroy.io/glossary/homoglyph/) - [Phishing kit](https://phishdestroy.io/glossary/phishing-kit/) - [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker) - [Abuse Report Generator](https://phishdestroy.io/developer-tools/abuse-report-generator) - [If you already used a fake site: emergency guide](https://phishdestroy.io/critical-action) - [All impersonated brands](https://phishdestroy.io/brand/) Data: PhishDestroy domain-report database, built 2026-10-22. Counts cover every reported domain whose stored target brand is Gmail; share of all PhishDestroy reports: 0.17%. Canonical: https://phishdestroy.io/brand/gmail/