How to report a phishing site to Google Cloud
To report a phishing or scam site to Google Cloud, use Google Cloud's report abuse on google cloud.
Hosting provider — Hosting provider — runs the servers, including Firebase Hosting sites.
How to reach them
Write the report
Paste the link, phone number or email address and we'll write the message for Google Cloud. You send it yourself.
Sites on these addresses
Google Cloud owns the parent domain, so it can remove a page on any of these directly — no registrar involved.
- *.web.app
- *.firebaseapp.com
What to include
- Include the abusive IP addresses or URLs
- Send a separate report for each IP address
Other ways to report to Google
- Google Safe Browsing — Blocklist — warns Chrome, Firefox and Safari users away from the site.
Not sure who hosts the site?
Scan it — we'll identify the host and registrar and give you the routes that apply.
Scan a websiteChecked against the official page on 2026-10-15.