i think but it’s a little more complicated than that… there might be some user content accessible on that domain because some apis might return them on get requests and stuff.

but mostly yeah because i doubt cloud customers or whatever can host their own api endpoints on googleapis.com. maybe a subdomain of a subdomain? but idk enough about google cloud to say for certain