How to report a phishing site to Google Cloud
Hosting provider — Hosting provider — runs the servers, including Firebase Hosting sites.
How to reach them
Sites on these addresses
Google Cloud owns the parent domain, so it can remove a page on any of these directly — no registrar involved.
- *.web.app
- *.firebaseapp.com
What to include
- Include the full URL, not just the domain.
- Attach a screenshot and the date/time you saw it.
- State plainly that it is phishing or fraud, and what it impersonates.
Other ways to report to Google
- Google Safe Browsing — Blocklist — warns Chrome, Firefox and Safari users away from the site.
Not sure who hosts the site?
Scan it — we'll identify the host and registrar and give you the routes that apply.
Scan a websiteThese details have not been re-checked against Google Cloud's official page recently. Confirm before relying on them.