Skip to main content
Question

I see Google Safe Browsing ineffective.

  • January 4, 2026
  • 3 replies
  • 80 views

QUAN
Forum|alt.badge.img
I have reported the domain to Google Safe Browsing multiple times and checked VirusTotal for malware or C2 botnet infection, but when I report it on https://safebrowsing.google.com/, I don't see any results indicating the domain is restricted.

3 replies

kentphelps
Staff
Forum|alt.badge.img+11
  • Staff
  • January 5, 2026

What happens when you try the  Site Status diagnostic tool


QUAN
Forum|alt.badge.img
  • Author
  • New Member
  • January 5, 2026

What happens when you try the  Site Status diagnostic tool

Hi kentphelps,
I’ve tested the domain using the Site Status diagnostic tool as you suggested.
According to Google Safe Browsing / Transparency Report, the current status shows “No unsafe content found”, with the last update on Dec 31, 2025 (see the attached screenshot from the Site Status page).
However, when cross-checking the same domain on VirusTotal, the results are quite different.
As shown in the attached VirusTotal screenshot, 12 out of 95 security vendors flag this domain as malicious, including several well-known engines (BitDefender, Kaspersky, Fortinet, Sophos, G-Data, Netcraft, etc.). In addition, alphaMountain.ai classifies it as Command-and-Control (C2) infrastructure.
So at the moment, there is a clear discrepancy:
Google Safe Browsing: clean / no unsafe content detected
VirusTotal & multiple threat intelligence vendors: malicious / C2-related indicators
This suggests that Google Safe Browsing may not yet be surfacing domain-level or infrastructure-based C2 signals, especially if there is no active payload delivery or end-user exploitation detected. It could also indicate a detection lag or a difference in prioritization between browser-focused protection and broader threat intelligence feeds.
I’m interested in your thoughts on how Google Safe Browsing weighs C2 or infrastructure-only signals, particularly when multiple vendors already flag the domain as malicious.

 


ErikaB
Community Manager
Forum|alt.badge.img+10
  • Community Manager
  • January 6, 2026

Hi ​@QUAN 

 

Thanks for reaching out with your question about Safe Browsing.

 

While our community is focused on Google Cloud security products (like SecOps, Security Command Center, etc.), we aren't able to address specific questions regarding internal Safe Browsing details (C2 signals, etc) or policy implementation here. Information regarding specific sites or internal data is often proprietary or confidential, and therefore not shared publicly through this channel.

 

For inquiries about Safe Browsing status, delisting requests, or issues related to your site, the correct channel is through the Google Search Console. This tool provides the specific resources and official process you need to review and address any warnings.

 

I hope this helps you get a resolution soon!