see example here: https://stackoverflow.com/questions/61867168/google-web-risk-api-returns-safe-for-phishing-site