Phishing sites impersonating Google Analytics

PhishDestroy has recorded 14 phishing domains impersonating Google Analytics since 2025-10-21, 0 of them in the last 30 days. The most used registrars are NiceNIC and Web Commerce Communications; the most common TLDs are .com and .pro. Open Google Analytics only from its official app or a saved bookmark.

14
Domains, all time
0
Last 30 days
4
Online at last check
0
Confirmed takedowns

New domains in the last 90 days

2026-07-25: 02026-07-26: 02026-07-27: 02026-07-28: 02026-07-29: 02026-07-30: 02026-07-31: 02026-08-01: 02026-08-02: 02026-08-03: 02026-08-04: 02026-08-05: 02026-08-06: 02026-08-07: 02026-08-08: 02026-08-09: 02026-08-10: 02026-08-11: 02026-08-12: 02026-08-13: 02026-08-14: 02026-08-15: 02026-08-16: 02026-08-17: 02026-08-18: 02026-08-19: 02026-08-20: 02026-08-21: 02026-08-22: 02026-08-23: 02026-08-24: 02026-08-25: 02026-08-26: 02026-08-27: 02026-08-28: 02026-08-29: 02026-08-30: 02026-08-31: 02026-09-01: 02026-09-02: 02026-09-03: 02026-09-04: 02026-09-05: 02026-09-06: 02026-09-07: 02026-09-08: 02026-09-09: 02026-09-10: 02026-09-11: 02026-09-12: 02026-09-13: 02026-09-14: 02026-09-15: 02026-09-16: 02026-09-17: 02026-09-18: 02026-09-19: 02026-09-20: 02026-09-21: 02026-09-22: 02026-09-23: 02026-09-24: 02026-09-25: 02026-09-26: 02026-09-27: 02026-09-28: 02026-09-29: 02026-09-30: 02026-10-01: 02026-10-02: 02026-10-03: 02026-10-04: 02026-10-05: 02026-10-06: 02026-10-07: 02026-10-08: 02026-10-09: 02026-10-10: 02026-10-11: 02026-10-12: 02026-10-13: 02026-10-14: 02026-10-15: 02026-10-16: 02026-10-17: 02026-10-18: 02026-10-19: 02026-10-20: 02026-10-21: 02026-10-22: 0
Google Analytics phishing domains detected per day: 0 from 2026-07-25 to 2026-10-22; peak 1.

How to tell a fake Google Analytics site

Words most often added to the brand in reported domains: neogamb, search, lycos, bexace, nexroll, veyloro, betrush, onlinelivegambling, cashnatural, rolls.

  • Type the address yourself or use a bookmark; phishing links for Google Analytics arrive through ads, search results, direct messages and fake support accounts.
  • Check the full domain before you sign in: look for extra words, hyphens, a different TLD or look-alike letters.
  • Google Analytics does not ask you to confirm your password or card details through a link in an email or SMS.

Paste a suspicious address into the Homoglyph Checker or check it against the DestroyList.

Latest Google Analytics phishing domains

The 14 most recently detected domains impersonating Google Analytics
DomainFirst detectedStatus at last checkRegistrar
evolon.cc2026-02-18UnknownNiceNIC
linegambt.fun2026-02-16OfflineSpaceship
jackpotriver.icu2026-02-13UnknownNiceNIC
casinodrops.click2026-02-08OfflineGlobal Domain
mellgame.space2026-02-07OfflineNameSilo
9rolls.com2026-02-07UnknownNiceNIC
cashnatural.com2026-01-31OnlineNameCheap
onlinelivegambling.com2026-01-24OfflineNameCheap
betrush.sbs2026-01-05UnknownNiceNIC
veyloro.com2026-01-05OfflineNameSilo
nexroll.bet2026-01-05OfflinePublicDomainRegistry.com
bexace.pro2026-01-05OnlineWeb Commerce Communications
search11.lycos.com2025-12-16OnlineGoDaddy.com
neogamb.com2025-10-21OnlineWeb Commerce Communications

All 14 Google Analytics reports

Where they are registered and hosted

Top-level domains

  1. .com6
  2. .pro1
  3. .bet1
  4. .sbs1
  5. .space1
  6. .click1
  7. .icu1
  8. .fun1

Hosting networks

  1. Cloudflare, Inc.8
  2. CLOUDFLARENET, US5
  3. LYCOS, US1

Related

Data: PhishDestroy domain-report database, built 2026-10-22. Counts cover every reported domain whose stored target brand is Google Analytics; share of all PhishDestroy reports: 0.01%.