How to report a phishing site to Google Cloud
Hosting provider — Hosting provider — runs the servers, including Firebase Hosting sites.
How to reach them
Write the report
Paste the link, phone number or email address and we'll write the message for Google Cloud. You send it yourself.
Sites on these addresses
Google Cloud owns the parent domain, so it can remove a page on any of these directly — no registrar involved.
- *.web.app
- *.firebaseapp.com
What to include
- Include the full URL, not just the domain.
- Attach a screenshot and the date/time you saw it.
- State plainly that it is phishing or fraud, and what it impersonates.
Other ways to report to Google
- Google Safe Browsing — Blocklist — warns Chrome, Firefox and Safari users away from the site.
Not sure who hosts the site?
Scan it — we'll identify the host and registrar and give you the routes that apply.
Scan a websiteThese details have not been re-checked against Google Cloud's official page recently. Confirm before relying on them.