The publisher name one is a silly social engineering hack: Google does validate publisher name, but it validates it as a Legal Name, a Company Name. Those are h

The publisher name one is a silly social engineering hack: Google does validate publisher name, but it validates it as a Legal Name, a Company Name. Those are handled by various political registries (State Tax Organizations, for instance). They don't know or care about domain names and "SmartThings.net, LLC" is silly looking to them but acceptable. They often generally try to avoid name clashes in a region (state), but generally they don't even work that hard at it because true name clashes are the territory of trademark/small mark/service mark laws. It was one of the failure cases in EV certificates back when browsers briefly thought "maybe it would be a good idea to highlight the website's legal name in the URL bar". Find the right jurisdiction and you can get any sort of "legal name" you want, including things that should have been "obviously" counterfeit like a "Facebook.com, LLC" and were perfectly good for phishing.