# Google LLC — PhishDestroy Threat Report Source: https://phishdestroy.io/domain/?registrar=Google+LLC Generated: 2026-04-21T18:39:28+00:00 ## Registrar profile Brand: Google Domains (now Squarespace) IANA ID: 895 Country: US Founded: 2014 Website: https://domains.squarespace.com ## Threat statistics - Flagged phishing domains in PhishDestroy DB: 334 - Still alive (not yet taken down): 126 (37.7%) - Taken down: 208 - VirusTotal-detected: 307 (91.9% detection rate) - Avg VT detections (non-zero): 7.8 - High-confidence threats (VT ≥ 5): 196 - First flagged: 2025-02-06 19:19:35 - Last flagged: 2026-04-20 13:50:55 - Total domains under registrar (NetAPI): 8,097,775 - PhishDestroy share of registrar portfolio: 0.004% ## Sample flagged domains (top 50 by VT detections) - netflix-clone-1a4f2.firebaseapp.com [VT:24, status:alive] → https://phishdestroy.io/domain/netflix-clone-1a4f2.firebaseapp.com/ - netflix-71f05.firebaseapp.com [VT:21, status:alive] → https://phishdestroy.io/domain/netflix-71f05.firebaseapp.com/ - social--social-8b962.us-central1.hosted.app [VT:21, status:dead] → https://phishdestroy.io/domain/social--social-8b962.us-central1.hosted.app/ - ptshopeeid597.blogspot.com [VT:19, status:dead] → https://phishdestroy.io/domain/ptshopeeid597.blogspot.com/ - crmcupoflb.firebaseapp.com [VT:18, status:alive] → https://phishdestroy.io/domain/crmcupoflb.firebaseapp.com/ - fuzzy-netflix-clone.web.app [VT:18, status:alive] → https://phishdestroy.io/domain/fuzzy-netflix-clone.web.app/ - info-resmi8-8.blogspot.com [VT:18, status:dead] → https://phishdestroy.io/domain/info-resmi8-8.blogspot.com/ - ledger-liveportal.web.app [VT:18, status:alive] → https://phishdestroy.io/domain/ledger-liveportal.web.app/ - nft-openseaclaims.web.app [VT:18, status:alive] → https://phishdestroy.io/domain/nft-openseaclaims.web.app/ - phantom-wallett.blogspot.gr [VT:18, status:dead] → https://phishdestroy.io/domain/phantom-wallett.blogspot.gr/ - dapps-debug.firebaseapp.com [VT:17, status:dead] → https://phishdestroy.io/domain/dapps-debug.firebaseapp.com/ - gz-plsl.web.app [VT:17, status:alive] → https://phishdestroy.io/domain/gz-plsl.web.app/ - metamask-k.blogspot.de [VT:17, status:dead] → https://phishdestroy.io/domain/metamask-k.blogspot.de/ - mystatemnt-desktopcapps.live [VT:17, status:dead] → https://phishdestroy.io/domain/mystatemnt-desktopcapps.live/ - swicom-dc261.web.app [VT:17, status:dead] → https://phishdestroy.io/domain/swicom-dc261.web.app/ - am22fcu.web.app [VT:16, status:alive] → https://phishdestroy.io/domain/am22fcu.web.app/ - coinbaseloginu.blogspot.ch [VT:16, status:dead] → https://phishdestroy.io/domain/coinbaseloginu.blogspot.ch/ - dapptoolchains.web.app [VT:16, status:dead] → https://phishdestroy.io/domain/dapptoolchains.web.app/ - hdfc-32-pan-update.web.app [VT:16, status:alive] → https://phishdestroy.io/domain/hdfc-32-pan-update.web.app/ - info-resmi388.blogspot.com [VT:16, status:dead] → https://phishdestroy.io/domain/info-resmi388.blogspot.com/ - mdsoft-crypt.firebaseapp.com [VT:16, status:dead] → https://phishdestroy.io/domain/mdsoft-crypt.firebaseapp.com/ - meeting-bonus.firebaseapp.com [VT:16, status:alive] → https://phishdestroy.io/domain/meeting-bonus.firebaseapp.com/ - netlfix-clone-b5f18.web.app [VT:16, status:alive] → https://phishdestroy.io/domain/netlfix-clone-b5f18.web.app/ - phantom-wallets.blogspot.li [VT:16, status:dead] → https://phishdestroy.io/domain/phantom-wallets.blogspot.li/ - phantom-wallett.blogspot.com.es [VT:16, status:dead] → https://phishdestroy.io/domain/phantom-wallett.blogspot.com.es/ - shopeeid258.blogspot.com [VT:16, status:dead] → https://phishdestroy.io/domain/shopeeid258.blogspot.com/ - smartprotocolfix.firebaseapp.com [VT:16, status:dead] → https://phishdestroy.io/domain/smartprotocolfix.firebaseapp.com/ - studio--scib-portal-banker-santa-l1l24.us-central1.hosted.app [VT:16, status:dead] → https://phishdestroy.io/domain/studio--scib-portal-banker-santa-l1l24.us-central1.hosted.app/ - coiinbase-logiin.blogspot.hu [VT:15, status:dead] → https://phishdestroy.io/domain/coiinbase-logiin.blogspot.hu/ - dapschains.web.app [VT:15, status:dead] → https://phishdestroy.io/domain/dapschains.web.app/ - formsly-form.web.app [VT:15, status:alive] → https://phishdestroy.io/domain/formsly-form.web.app/ - infodigitalemaintenance.web.app [VT:15, status:dead] → https://phishdestroy.io/domain/infodigitalemaintenance.web.app/ - mdsoft-crypt.web.app [VT:15, status:dead] → https://phishdestroy.io/domain/mdsoft-crypt.web.app/ - netflix-clone-d9498.web.app [VT:15, status:dead] → https://phishdestroy.io/domain/netflix-clone-d9498.web.app/ - project-appeal-form-8642594281.web.app [VT:15, status:dead] → https://phishdestroy.io/domain/project-appeal-form-8642594281.web.app/ - ronin-wallet.firebaseapp.com [VT:15, status:alive] → https://phishdestroy.io/domain/ronin-wallet.firebaseapp.com/ - sawiosl-f51a2.firebaseapp.com [VT:15, status:dead] → https://phishdestroy.io/domain/sawiosl-f51a2.firebaseapp.com/ - sawiosl-f51a2.web.app [VT:15, status:dead] → https://phishdestroy.io/domain/sawiosl-f51a2.web.app/ - stakechainwallet.web.app [VT:15, status:dead] → https://phishdestroy.io/domain/stakechainwallet.web.app/ - tucajadeahorrspa.web.app [VT:15, status:alive] → https://phishdestroy.io/domain/tucajadeahorrspa.web.app/ - waitingpackageco.web.app [VT:15, status:alive] → https://phishdestroy.io/domain/waitingpackageco.web.app/ - chainsupports.firebaseapp.com [VT:14, status:dead] → https://phishdestroy.io/domain/chainsupports.firebaseapp.com/ - claim-nodes.firebaseapp.com [VT:14, status:dead] → https://phishdestroy.io/domain/claim-nodes.firebaseapp.com/ - nextlayer-datagridpulse.firebaseapp.com [VT:14, status:dead] → https://phishdestroy.io/domain/nextlayer-datagridpulse.firebaseapp.com/ - oxproeliptic-server.firebaseapp.com [VT:14, status:alive] → https://phishdestroy.io/domain/oxproeliptic-server.firebaseapp.com/ - phantom-wallett.blogspot.de [VT:14, status:dead] → https://phishdestroy.io/domain/phantom-wallett.blogspot.de/ - walletappsync.firebaseapp.com [VT:14, status:dead] → https://phishdestroy.io/domain/walletappsync.firebaseapp.com/ - astar-apps.firebaseapp.com [VT:13, status:alive] → https://phishdestroy.io/domain/astar-apps.firebaseapp.com/ - barcelona-facebook.blogspot.com [VT:13, status:dead] → https://phishdestroy.io/domain/barcelona-facebook.blogspot.com/ - coinauthnode.firebaseapp.com [VT:13, status:dead] → https://phishdestroy.io/domain/coinauthnode.firebaseapp.com/ ## Links - Full interactive hub: https://phishdestroy.io/domain/?registrar=Google+LLC - Site-wide LLM feed: https://phishdestroy.io/llms.txt - Report abuse / appeals: https://phishdestroy.io/appeals/