Malicious sites are being identified and verified by Safe Browsing against a server-side list of bad domains, according to Google. “The server-side list can include unsafe sites as soon as they are discovered, so it is able to capture sites that switch quickly.
Source: SC Magazine