Google: phishing domains and abuse response

PhishDestroy reported 114 phishing domains registered with Google between 2026-01-02 and 2026-06-18, sending 114 abuse reports. Median time from the first report until a domain stopped resolving: 24.7 days (n = 45). 54 of 99 domains were still active 90 days after the first report. The database holds 1,959 Google domains in total.

114
Domains reported (window)
114
Abuse reports sent
24.7 days
Median time to unavailable
1,959
In the database now

Abuse-report outcome

Status of the reported domains at the last check of the Registrar Scoreboard dataset (2026-09-09): Live 68 (60%); Offline 44 (39%); Suspended 2 (2%).

90th percentile time to unavailable: 42.4 days. Response time starts at the first stored report and ends at the first observation that the domain no longer resolved; it is not proof of registrar action.

What is registered there

Impersonated brands

  1. Facebook302
  2. ShopeePay212
  3. Google127
  4. Google105
  5. Phantom63
  6. Shopee63
  7. Coinbase52
  8. Instagram46

Top-level domains

  1. .com1,310
  2. .app475
  3. .md10
  4. .de8
  5. .uy6
  6. .mt6
  7. .cy6
  8. .es6

Most reported domains

  1. astervote.app
  2. bluefln.app
  3. bonus-flaresnetwork.app
  4. boost-equium.app
  5. cetus-sui.app

Latest Google phishing domains

The 30 most recently detected domains at Google
DomainFirst detectedStatus at last checkRegistrar
swiftprotocolresolvers.web.app2026-09-17OnlineGoogle Firebase
shopee1218.blogspot.com2026-09-17OnlineGoogle Blogger
facebook-visitantes.blogspot.com2026-09-17OnlineGoogle Blogger
netflix-login.blogspot.com2026-09-17OnlineGoogle Blogger
real-facebook.blogspot.com2026-09-17OnlineGoogle Blogger
gestionempresarialdanier.blogspot.com2026-09-17OnlineGoogle Blogger
rbx-df634.blogspot.com2026-09-17OnlineGoogle Blogger
face-book-1.blogspot.com2026-09-15OnlineGoogle Blogger
digitalcurrencysupport.blogspot.com2026-09-15OnlineGoogle Blogger
freefireapk2018.blogspot.com2026-09-14OnlineGoogle Blogger
mm2item.blogspot.com2026-09-14OnlineGoogle Blogger
jksggfd-rblx.blogspot.com2026-09-14OnlineGoogle Blogger
howtogetbitcoinfromcoinbasetobinance.blogspot.com2026-09-14OnlineGoogle Blogger
stealaneggitem.blogspot.com2026-09-14OnlineGoogle Blogger
scgamesteal.blogspot.com2026-09-14OnlineGoogle Blogger
rblx-steal-egg.blogspot.com2026-09-14OnlineGoogle Blogger
keyboardescape1.blogspot.com2026-09-14OnlineGoogle Blogger
banbif-ie.firebaseapp.com2026-09-13OnlineGoogle Firebase
90claim-free-robux-instant.blogspot.com2026-09-13OnlineGoogle Blogger
layanan-shopee17.blogspot.com2026-09-13OnlineGoogle Blogger
gebyarshopee228.blogspot.com2026-09-13OnlineGoogle Blogger
facebooklogin01.blogspot.com2026-09-13OnlineGoogle Blogger
consolab.firebaseapp.com2026-09-13OnlineGoogle Firebase
shopee-indonesia33.blogspot.com2026-09-12OnlineGoogle Blogger
en-opaldex.web.app2026-09-12OnlineGoogle Firebase
kokomoji.web.app2026-09-11OnlineGoogle Firebase
shopee1718.blogspot.com2026-09-11OnlineGoogle Blogger
frtnii.blogspot.com2026-09-11OnlineGoogle Blogger
robloxrobuxnewupdssv2.blogspot.com2026-09-11OnlineGoogle Blogger
kokomojinft.web.app2026-09-11OnlineGoogle Firebase

Related

Sources: Registrar Scoreboard dataset (/assets/data/registrar-accountability.json, reports 2026-01-02 to 2026-06-18) and the PhishDestroy domain-report database, built 2026-10-22. Registrar names are matched to stored registration data on a best-effort basis.