# Phishing sites impersonating Google Analytics

PhishDestroy has recorded 14 phishing domains impersonating Google Analytics since 2025-10-21, 0 of them in the last 30 days. The most used registrars are NiceNIC and Web Commerce Communications; the most common TLDs are .com and .pro. Open Google Analytics only from its official app or a saved bookmark.

14Domains, all time

0Last 30 days

4Online at last check

0Confirmed takedowns

## New domains in the last 90 days

Google Analytics phishing domains detected per day: 0 from 2026-07-25 to 2026-10-22; peak 1.

## How to tell a fake Google Analytics site

Words most often added to the brand in reported domains: neogamb, search, lycos, bexace, nexroll, veyloro, betrush, onlinelivegambling, cashnatural, rolls.
- Type the address yourself or use a bookmark; phishing links for Google Analytics arrive through ads, search results, direct messages and fake support accounts.
- Check the full domain before you sign in: look for extra words, hyphens, a different TLD or look-alike letters.
- Google Analytics does not ask you to confirm your password or card details through a link in an email or SMS.

Paste a suspicious address into the [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker) or check it against the [DestroyList](https://phishdestroy.io/developer-tools/destroylist-check).

## Latest Google Analytics phishing domains

The 14 most recently detected domains impersonating Google Analytics
Domain | First detected | Status at last check | Registrar | 
[evolon.cc](https://phishdestroy.io/domain/evolon.cc/) | 2026-02-18 | Unknown | NiceNIC | 
[linegambt.fun](https://phishdestroy.io/domain/linegambt.fun/) | 2026-02-16 | Offline | Spaceship | 
[jackpotriver.icu](https://phishdestroy.io/domain/jackpotriver.icu/) | 2026-02-13 | Unknown | NiceNIC | 
[casinodrops.click](https://phishdestroy.io/domain/casinodrops.click/) | 2026-02-08 | Offline | Global Domain | 
[mellgame.space](https://phishdestroy.io/domain/mellgame.space/) | 2026-02-07 | Offline | NameSilo | 
[9rolls.com](https://phishdestroy.io/domain/9rolls.com/) | 2026-02-07 | Unknown | NiceNIC | 
[cashnatural.com](https://phishdestroy.io/domain/cashnatural.com/) | 2026-01-31 | Online | NameCheap | 
[onlinelivegambling.com](https://phishdestroy.io/domain/onlinelivegambling.com/) | 2026-01-24 | Offline | NameCheap | 
[betrush.sbs](https://phishdestroy.io/domain/betrush.sbs/) | 2026-01-05 | Unknown | NiceNIC | 
[veyloro.com](https://phishdestroy.io/domain/veyloro.com/) | 2026-01-05 | Offline | NameSilo | 
[nexroll.bet](https://phishdestroy.io/domain/nexroll.bet/) | 2026-01-05 | Offline | PublicDomainRegistry.com | 
[bexace.pro](https://phishdestroy.io/domain/bexace.pro/) | 2026-01-05 | Online | Web Commerce Communications | 
[search11.lycos.com](https://phishdestroy.io/domain/search11.lycos.com/) | 2025-12-16 | Online | GoDaddy.com | 
[neogamb.com](https://phishdestroy.io/domain/neogamb.com/) | 2025-10-21 | Online | Web Commerce Communications | 

[All 14 Google Analytics reports](https://phishdestroy.io/domain/?brand=Google Analytics)

## Where they are registered and hosted

### Registrars

- [NiceNIC](https://phishdestroy.io/registrar/nicenic/)4
- [Web Commerce Communications](https://phishdestroy.io/registrar/webnic/)2
- [NameSilo](https://phishdestroy.io/registrar/namesilo/)2
- [NameCheap](https://phishdestroy.io/registrar/namecheap/)2
- [GoDaddy.com](https://phishdestroy.io/registrar/godaddy/)1
- [PublicDomainRegistry.com](https://phishdestroy.io/registrar/publicdomainregistry-pdr/)1
- [Global Domain](https://phishdestroy.io/registrar/global-domain-group/)1
- [Spaceship](https://phishdestroy.io/registrar/spaceship/)1

### Top-level domains

- [.com](https://phishdestroy.io/tld/com/)6
- [.pro](https://phishdestroy.io/tld/pro/)1
- [.bet](https://phishdestroy.io/tld/bet/)1
- [.sbs](https://phishdestroy.io/tld/sbs/)1
- [.space](https://phishdestroy.io/tld/space/)1
- [.click](https://phishdestroy.io/tld/click/)1
- [.icu](https://phishdestroy.io/tld/icu/)1
- [.fun](https://phishdestroy.io/tld/fun/)1

### Hosting networks

- Cloudflare, Inc.8
- CLOUDFLARENET, US5
- LYCOS, US1

## Related

- [Typosquatting](https://phishdestroy.io/glossary/typosquatting/)
- [Homoglyph](https://phishdestroy.io/glossary/homoglyph/)
- [Phishing kit](https://phishdestroy.io/glossary/phishing-kit/)
- [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker)
- [Abuse Report Generator](https://phishdestroy.io/developer-tools/abuse-report-generator)
- [If you already used a fake site: emergency guide](https://phishdestroy.io/critical-action)
- [All impersonated brands](https://phishdestroy.io/brand/)

Data: PhishDestroy domain-report database, built 2026-10-22. Counts cover every reported domain whose stored target brand is Google Analytics; share of all PhishDestroy reports: 0.01%.

Canonical: https://phishdestroy.io/brand/google-analytics/