Phishing sites impersonating Google

PhishDestroy has recorded 9,391 phishing domains impersonating Google since 2024-03-20, 515 of them in the last 30 days. The most used registrars are Dynadot and NICENIC; the most common TLDs are .com and .app. The official Google domain is google.com: any other site asking for your login or wallet is not Google.

9,391
Domains, all time
515
Last 30 days
3,954
Online at last check
532
Confirmed takedowns

New domains in the last 90 days

2026-07-25: 12026-07-26: 292026-07-27: 6652026-07-28: 682026-07-29: 292026-07-30: 362026-07-31: 442026-08-01: 252026-08-02: 652026-08-03: 402026-08-04: 492026-08-05: 822026-08-06: 442026-08-07: 262026-08-08: 142026-08-09: 962026-08-10: 402026-08-11: 112026-08-12: 302026-08-13: 222026-08-14: 322026-08-15: 312026-08-16: 212026-08-17: 192026-08-18: 692026-08-19: 102026-08-20: 432026-08-21: 132026-08-22: 732026-08-23: 352026-08-24: 792026-08-25: 192026-08-26: 422026-08-27: 212026-08-28: 652026-08-29: 72026-08-30: 42026-08-31: 1062026-09-01: 192026-09-02: 502026-09-03: 482026-09-04: 232026-09-05: 392026-09-06: 252026-09-07: 552026-09-08: 1452026-09-09: 302026-09-10: 132026-09-11: 252026-09-12: 202026-09-13: 272026-09-14: 162026-09-15: 232026-09-16: 112026-09-17: 752026-09-18: 12026-09-19: 52026-09-20: 302026-09-21: 72026-09-22: 32026-09-23: 422026-09-24: 572026-09-25: 292026-09-26: 52026-09-27: 232026-09-28: 72026-09-29: 62026-09-30: 22026-10-01: 22026-10-02: 12026-10-03: 82026-10-04: 82026-10-05: 82026-10-06: 192026-10-07: 652026-10-08: 312026-10-09: 572026-10-10: 212026-10-11: 292026-10-12: 62026-10-13: 222026-10-14: 122026-10-15: 152026-10-16: 172026-10-17: 62026-10-18: 22026-10-19: 82026-10-20: 32026-10-21: 22026-10-22: 0
Google phishing domains detected per day: 3,308 from 2026-07-25 to 2026-10-22; peak 665.

How to tell a fake Google site

Official domains: google.com, accounts.google.com.

Words most often added to the brand in reported domains: beefyhubs, airdropsalert, airdropalert, hub, airdrpsalert, airdrpsalerts, beefy, beefyapp, sspl, vote.

  • Type the address yourself or use a bookmark; phishing links for Google arrive through ads, search results, direct messages and fake support accounts.
  • Check the full domain before you sign in: look for extra words, hyphens, a different TLD or look-alike letters.
  • Google does not ask you to confirm your password or card details through a link in an email or SMS.

Paste a suspicious address into the Homoglyph Checker or check it against the DestroyList.

Latest Google phishing domains

The 50 most recently detected domains impersonating Google
DomainFirst detectedStatus at last checkRegistrar
928527-google.com2026-10-21UnknownNICENIC
chromeintl-google.com.cn2026-10-21Online杭州爱名网络有限公司
pcchrome-google.com.cn2026-10-20Online杭州爱名网络有限公司
appeal-case.about-help.com2026-10-20OnlinePT Cloud Hosting Indonesia
qiumenghui-google.com.cn2026-10-20Online广东时代互联科技有限公司
dcon-collab.land2026-10-19OnlineNICENIC
googlewalletsextensions.com2026-10-19OnlineNICENIC
adwords-google.ru2026-10-19OnlineRU-CENTER-RU
lewan-google.com.cn2026-10-19Online—
qmh-google.com.cn2026-10-19Online广东时代互联科技有限公司
chromedosk-google.com.cn2026-10-19Online温州市中网计算机技术服务有限公司
selfclawai.net2026-10-19OnlineNAMECHEAP
frankencoins.pro2026-10-19OnlineNICENIC
googlemeet.ink2026-10-18OnlinePublicDomainRegistry.com
unitednation-imf.com2026-10-18OnlineGoDaddy.com
blackviewglobal.shop2026-10-17OnlineSpaceship
globalstocksrenewedcentre.live2026-10-17OnlineDynadot
perkgems.com2026-10-17OnlineTUCOWS.COM
rpilatesjp.com2026-10-17OnlineGransy, s.r.o
avrammarketingagencies.com2026-10-17OnlineGransy, s.r.o
viccontructioninc.com2026-10-17OnlineGransy, s.r.o
quicknode.fhlac.com2026-10-16OnlineGname.com
makelarij.be2026-10-16OnlineVimexx
theroomemes.com2026-10-16OnlineDominet (HK)
act.googlestore.cc2026-10-16OnlineDynadot
adaotp.biz.id2026-10-16OnlinePT Dewabisnis Digital Indonesia
bluecollarservs.com2026-10-16OnlineGoDaddy.com
app.oct24.ai2026-10-16OnlineNameCheap
bikepartcentral.shop2026-10-16OnlineDynadot
marekvoprsal.cz2026-10-16OnlineREG-CZNIC
contajunto.com2026-10-16OnlineGoDaddy.com
clearenergy.pl2026-10-16Onlinehome.pl sp. z o.o
gleventslive.com.br2026-10-16Online—
wwv.departement-it.net2026-10-16OnlineDynadot
wbeuvipfx9.com2026-10-16OnlineDynadot
keych.org2026-10-16OnlineHostopia Canada
bigcomfort.shop2026-10-16OnlineDynadot
bigberthaofficial.shop2026-10-16OnlineDynadot
xn--btrefll-rfbe.com2026-10-15OnlineDYNADOT
xn--bitrefll-q2a.com2026-10-15OnlineDYNADOT
bitrgifts.com2026-10-15OnlineNICENIC
bitrgift.com2026-10-15OnlineNICENIC
xn--exoix-x6a.com2026-10-15OnlineDynadot
colurrn.com2026-10-15OnlineNICENIC
promonowusa.com2026-10-15OfflineGoDaddy.com
cash-driver.com2026-10-15OnlineGlobal Domain
instanders.org2026-10-15OnlineNAMECHEAP
aeroinsta.net.co2026-10-15OnlineDYNADOT
creditscitize.com2026-10-15OnlineUltahost
rb88-google.com.cn2026-10-15Online广东时代互联科技有限公司

All 9,391 Google reports

Where they are registered and hosted

Registrars

  1. Dynadot2,242
  2. NICENIC644
  3. Cloudflare618
  4. NameSilo280
  5. GoDaddy.com276
  6. Global Domain275
  7. Dynadot271
  8. Gname.com228

Top-level domains

  1. .com2,766
  2. .app573
  3. .dev443
  4. .sbs415
  5. .io370
  6. .cfd337
  7. .lol316
  8. .xyz281

Hosting networks

  1. GOOGLE, US2,796
  2. Cloudflare, Inc.2,480
  3. Fastly, Inc.672
  4. Amazon.com, Inc.396
  5. CLOUDFLARENET, US315
  6. GOOGLE - Google LLC, US288
  7. AS-COLOCROSSING, US225
  8. CLOUDFLARENET - Cloudflare, Inc., US210

Related

Data: PhishDestroy domain-report database, built 2026-10-22. Counts cover every reported domain whose stored target brand is Google; share of all PhishDestroy reports: 4.18%.