Remove a Google Dangerous Site Warning
Before You Start
This guide shows you how to remove a Google dangerous site warning from your website, which appears when Google Safe Browsing lists your site for hosting malware or phishing. It is for site owners and administrators who can reach the site files, the database and Google Search Console. Before you start, confirm that the site is clean, because a review of an infected site will fail.
Clean the Site and Close the Entry Point
- Read the notice. Open the security issues report in Search Console or review the warning page to see which URLs are affected. The notice often names the type of problem, such as malware or deceptive pages.
- Remove the harmful content. Find and delete injected code, unwanted pages and altered redirects. Check for backdoors and web shells as well, since copies of the infection often remain.
- Update software and change credentials. Update your site software, plugins and themes, remove unused accounts and change passwords. This closes the weakness that let the attacker in and helps prevent reinfection. Security updates are the main protection here.
- Check the site again. Visit the affected pages from several devices and browsers and run a malware scan. Confirm that no unexpected redirects or foreign content remain.
Request a Review
- Confirm the property in Search Console. Make sure you have verified ownership of the exact address Google has flagged, including the protocol and any subdomain.
- Submit a review request. Use the review option in the security issues report and describe what you found and what you removed. Be specific and accurate, since the reviewer checks the fix.
- Wait for the outcome. Reviews take time, and Google reports the result through Search Console. If the review fails, the site probably still contains the problem, so repeat the cleanup before asking again.
Mistakes That Delay Removal
- Requesting a review before the infection is fully cleaned, which makes the review fail.
- Removing visible malware but leaving backdoors, injected database content or hidden accounts.
- Ignoring the entry point, so the site is listed again soon after the review.
Ask your host or a security specialist for help if you cannot find all the infected files, if the site keeps being reinfected, or if the account has been suspended. Keep a record of every change you make, since it helps when you explain the fix in a review. Malware scanners can help locate infected files, but they do not replace a manual check.
How long does a Google dangerous site warning last?
The warning can remain for days or weeks after a cleanup, because review takes time and Google must recrawl the affected pages. It is lifted once the harmful content is gone and a review confirms it. Requesting a review too early usually extends the wait, so finish the cleanup and check it first.
Can my site be listed again after the warning is removed?
Yes, if the entry point that allowed the infection is still open. A reinfection can lead to a new listing. Updating software, using strong unique passwords and removing unused accounts reduce this risk considerably.
Does a dangerous site warning affect my email as well?
Not directly. Google Safe Browsing protects web visitors, while email blocklists are a separate system with their own criteria and review process. A compromised site can cause problems in both, so each list needs to be checked separately.