Overview
- Google rolled out the changes on Tuesday and Wednesday, adding a lower‑confidence “suspicious” warning and preserving a full‑screen red interstitial for high‑confidence “dangerous” sites.
- Suspicious warnings appear as a darkened pop‑up overlay that leaves the page visible and offers a “Mark as safe” option while dangerous sites show the existing full‑page red block.
- Gemini scam detection moved from on‑device models to a more powerful server‑side Gemini for users who enable Enhanced Protection, with page text sent for analysis only when strong scam signals appear and processed ephemerally according to Google.
- Chrome now scrubs personally identifiable information from copied clipboard commands and sends suspected ClickFix payloads to Safe Browsing for analysis, warning Enhanced Protection users before they run dangerous terminal commands.
- Chrome turns on a prompt by default before connecting to unencrypted HTTP for all users, and the changes deepen real‑time protection but raise new privacy and false‑positive tradeoffs that observers and administrators may scrutinize; Enhanced Protection launched in 2020 and had over 1 billion users by 2025.