Chrome distinguishes suspicious sites from dangerous ones using Gemini AI analysis

Google has updated Chrome to differentiate between dangerous websites and those merely deemed suspicious. According to ZDNET, the browser now uses Gemini AI to analyze site content, brand representation, intent, and domain reputation. This allows the system to assign a scam likelihood score. The feature is active on both computers and mobile devices.

What changed in Chrome’s warning system?

Previously, Chrome primarily warned users about sites known to be malicious. Now, it also flags pages that exhibit deceptive patterns similar to phishing or scam sites. Google stated these new warnings use different formats, colors, and text to help users make context-aware choices. This distinction allows the browser to expand its protective coverage without overwhelming users with false alarms.

How does the AI determine risk?

Gemini evaluates multiple factors to derive a risk score. It looks at the site’s content, the brand it claims to represent, its apparent intent, and its domain reputation. If a site is deemed suspicious, the warning is subtle, offering a "Return to safety" button or an option to mark the site as safe. Dangerous sites trigger a red screen with a strong recommendation to leave.

What other protections were added?

Beyond suspicious site warnings, Google outlined two other measures in a Tuesday blog post. The browser now protects against fake antivirus updates. It can also thwart ClickFix social engineering attacks. These updates aim to reduce the success rate of online scams targeting Chrome users on all supported platforms.

What does this mean for operations?

As TechSec Feed reported on 2026-10-15 regarding counterfeit browser listings, verifying package identities remains crucial. This update shifts some risk assessment to the client side. Operations teams should note that users now have the option to override suspicious site warnings, which may require additional user education.

Questions to ask your suppliers

Teams usually verify whether third-party web services employ similar risk-scoring mechanisms. Check if vendors provide clear indicators of their own security posture. Ensure that internal policies account for users bypassing browser warnings. Confirm that supplier support portals do not trigger false positives. Align with IT to monitor for increased helpdesk tickets related to blocked sites.

Background: Phishing

This checklist provides actionable technical controls to stop phishing. It covers email authentication, identity hardening, and endpoint detection. Implement these measures to reduce reliance on user training and close common infrastructure vulnerabilities that attackers exploit.

Read the full guide: Phishing Prevention Checklist for Technical Defenses

What to do and how to stay safe: Chrome

• Review browser policy settings to ensure new warning features are enabled for all users.
• Train staff on the difference between dangerous and suspicious site alerts.
• Monitor helpdesk logs for reports of legitimate sites being flagged.
• Verify that critical vendor portals are not incorrectly classified as suspicious.

Step-by-step guide: Browser Security Settings for Small Business Teams

General security guidance from the TechSec Feed newsroom. It is not confirmed advice from the organisations named in this story.

Frequently asked questions

Can users ignore suspicious site warnings?

Yes, users can mark a suspicious site as safe if they are certain it is legitimate.

Does this affect mobile devices?

Yes, the new measures apply to Chrome on both computers and mobile devices.

What AI powers this feature?

Gemini analyzes site content and reputation to derive a scam likelihood score.