Malte ZanderContents
Report a phishing page through Google Safe Browsing's form with the full URL. Once Google lists the page, visitors in Chrome and other browsers that use Safe Browsing see a red warning before the page loads. That protects people while the host and registrar are still reviewing. Don't wait for automatic detection: in a large study, Google listed only a small share of phishing URLs, and on average only after several days.
- Google says Safe Browsing helps protect over five billion devices every day by showing warnings about dangerous sites (Google).
- In a study of 286,237 phishing URLs, Google Safe Browsing detected 18.41 percent of the addresses, after 108.73 hours on average (Lee et al., WWW 2025).
- 83.93 percent of the phishing sites studied were already offline before Safe Browsing detected them (Lee et al., WWW 2025).
- The Site Status tool in Google's Transparency Report shows whether Google currently classifies a page as dangerous (Google).
What does a Google Safe Browsing report do?
It triggers a warning before the visit, not a removal. When Google classifies an address as phishing, Chrome and other browsers that use Safe Browsing show a full-page red warning before the page loads (Google). Most people stop there. The page itself stays online until the host or registrar acts.
That is exactly why the report is so valuable: it works during the time the actual takedown is still running. A takedown at the host can take hours or days, and a browser warning protects every visitor whose browser uses Safe Browsing in the meantime.
Why shouldn't you wait for automatic detection?
Because for most phishing pages it comes too late or not at all. A study presented at the ACM Web Conference 2025 followed 286,237 phishing URLs for five months. Google Safe Browsing detected 18.41 percent of them. The average time to detection was 108.73 hours, more than four days, and 83.93 percent of the sites were already offline before they were detected (Lee et al., WWW 2025).
For you as the brand being imitated, that means: don't rely on Google finding a copy of your site on its own. Report every confirmed phishing page actively, ideally within the first hour.
How do you report a page, step by step?
It takes two minutes:
Secure the evidence. Screenshots and the full URL come first, because a page that gets warned can disappear or change.
Open the form. Go to Google Safe Browsing's report form.
Enter the full URL. With path and parameters. If the page only shows its content with parameters, the full address is essential.
Add a short description. Which brand is imitated, what the page asks for and where the real site is.
Submit and record it. Note the date and time so you can check later when the warning appears.
Report the same address to Microsoft in parallel. Microsoft Defender SmartScreen warns users of Microsoft Edge about dangerous sites.
How do you check whether the warning is live?
With the Site Status tool in Google's Transparency Report. Enter the address, and the tool shows whether Google currently classifies the page as dangerous. Don't open the fake in your own browser to test the warning; use the tool or an isolated environment. Record when the warning appears. It is a useful metric for your reporting, more on that in Measuring takedown success.
What doesn't a browser warning replace?
The takedown itself. The warning only reaches browsers and apps that use Safe Browsing. People using other browsers, employees in company networks with their own filters and apps with built-in web views may not see it. And the operator can set up the same page at a new address that isn't listed yet.
| Measure | Effect | Limit |
|---|---|---|
| Google Safe Browsing | Red warning in Chrome and other browsers that use Safe Browsing | The page stays reachable, new addresses aren't listed |
| Microsoft SmartScreen | Warning in Microsoft Edge | Applies to Microsoft products only |
| Host | Content and account are removed | Timing depends on the provider |
| Registrar | The domain is suspended | Only for domains registered for abuse |
That's why you always report to all channels at once, as described in One find, many reports.
What if your own site gets flagged by mistake?
It can happen, for example when your website has been hacked. Clean the site and request a review through Google Search Console, where Google shows security issues to verified site owners. For fakes of your brand, none of this is needed: there you want the warning.
How does AI Fraud Protect help?
AI Fraud Protect prepares the Google Safe Browsing report for every confirmed case together with the reports to the host, registrar and DNS provider. The browser warning becomes part of the first wave, not an afterthought. A person reviews and sends every report, and the case stays on the follow-up list until the fake is offline.
Start the free fraud scan for a short report within 48 hours, or request a demo to see detection, evidence and takedown in the app.
FAQ
Does a Google Safe Browsing report cost anything?
No, the form is free and open to everyone.
How quickly does the warning appear after a report?
Google doesn't give a timeframe. Check the status with the Site Status tool and report to the host, registrar and Microsoft in parallel instead of waiting for the warning.
Does Google remove the page from search results?
A Safe Browsing report targets browser warnings. Google also shows warnings next to search results for dangerous pages, but the report is no guarantee of removal from search.
Do I have to report every subpage separately?
Report the address victims reach. If several fakes sit on the same domain, report each known URL, and report the domain as a whole to the registrar.
Sources
Lee, Lim, Kim, Kwon, Kim: 7 Days Later, Analyzing Phishing-Site Lifespan After Detected, ACM Web Conference 2025