Yes it is. Via sites.google.com or Google Docs.

These are abused all the time for phishing and malicious threat actors.