Phishing sites impersonating Google Tag Manager

PhishDestroy has recorded 14 phishing domains impersonating Google Tag Manager since 2025-10-24, 0 of them in the last 30 days. The most used registrars are NameSilo and NiceNIC; the most common TLDs are .com and .top. Open Google Tag Manager only from its official app or a saved bookmark.

14
Domains, all time
0
Last 30 days
0
Online at last check
0
Confirmed takedowns

New domains in the last 90 days

2026-07-25: 02026-07-26: 02026-07-27: 02026-07-28: 02026-07-29: 02026-07-30: 02026-07-31: 02026-08-01: 02026-08-02: 02026-08-03: 02026-08-04: 02026-08-05: 02026-08-06: 02026-08-07: 02026-08-08: 02026-08-09: 02026-08-10: 02026-08-11: 02026-08-12: 02026-08-13: 02026-08-14: 02026-08-15: 02026-08-16: 02026-08-17: 02026-08-18: 02026-08-19: 02026-08-20: 02026-08-21: 02026-08-22: 02026-08-23: 02026-08-24: 02026-08-25: 02026-08-26: 02026-08-27: 02026-08-28: 02026-08-29: 02026-08-30: 02026-08-31: 02026-09-01: 02026-09-02: 02026-09-03: 02026-09-04: 02026-09-05: 02026-09-06: 02026-09-07: 02026-09-08: 02026-09-09: 02026-09-10: 02026-09-11: 02026-09-12: 02026-09-13: 02026-09-14: 02026-09-15: 02026-09-16: 02026-09-17: 02026-09-18: 02026-09-19: 02026-09-20: 02026-09-21: 02026-09-22: 02026-09-23: 02026-09-24: 02026-09-25: 02026-09-26: 02026-09-27: 02026-09-28: 02026-09-29: 02026-09-30: 02026-10-01: 02026-10-02: 02026-10-03: 02026-10-04: 02026-10-05: 02026-10-06: 02026-10-07: 02026-10-08: 02026-10-09: 02026-10-10: 02026-10-11: 02026-10-12: 02026-10-13: 02026-10-14: 02026-10-15: 02026-10-16: 02026-10-17: 02026-10-18: 02026-10-19: 02026-10-20: 02026-10-21: 02026-10-22: 0
Google Tag Manager phishing domains detected per day: 0 from 2026-07-25 to 2026-10-22; peak 1.

How to tell a fake Google Tag Manager site

Words most often added to the brand in reported domains: newdemogreen, jumaplay, wilecas, drenonox, kujobet, evalnox, luminbet, xjembet, spadess, olympus.

  • Type the address yourself or use a bookmark; phishing links for Google Tag Manager arrive through ads, search results, direct messages and fake support accounts.
  • Check the full domain before you sign in: look for extra words, hyphens, a different TLD or look-alike letters.
  • Google Tag Manager does not ask you to confirm your password or card details through a link in an email or SMS.

Paste a suspicious address into the Homoglyph Checker or check it against the DestroyList.

Latest Google Tag Manager phishing domains

The 14 most recently detected domains impersonating Google Tag Manager
DomainFirst detectedStatus at last checkRegistrar
solacespin.com2026-01-05OfflineDominet (HK)
cashunt.world2026-01-05OfflineWeb Commerce Communications
beastrun.cc2026-01-05UnknownNiceNIC
trueamericancasino.com2025-12-27UnknownNiceNIC
olympus369.net2025-12-22OfflineNameSilo
spadess.top2025-12-14OfflineNameSilo
xjembet.com2025-12-13OfflineMAT BAO
luminbet.com2025-11-15OfflineDominet (HK)
evalnox.com2025-11-07OfflineNameSilo
kujobet.com2025-11-07OfflineNameCheap
drenonox.com2025-11-07OfflineNameSilo
wilecas.com2025-11-01OfflineMAT BAO
jumaplay.com2025-10-25OfflineWeb Commerce Communications
newdemogreen.com2025-10-24UnknownNiceNIC

All 14 Google Tag Manager reports

Where they are registered and hosted

Registrars

  1. NameSilo4
  2. NiceNIC3
  3. Web Commerce Communications2
  4. MAT BAO2
  5. Dominet (HK)2
  6. NameCheap1

Top-level domains

  1. .com10
  2. .top1
  3. .net1
  4. .cc1
  5. .world1

Hosting networks

  1. CLOUDFLARENET, US14

Related

Data: PhishDestroy domain-report database, built 2026-10-22. Counts cover every reported domain whose stored target brand is Google Tag Manager; share of all PhishDestroy reports: 0.01%.