A red warning shows instead of your website.
A full-page red warning in Chrome, Firefox or Safari (“Dangerous site”, “Deceptive site ahead”, “The site ahead contains malware”) means Google Safe Browsing has listed your domain. All three browsers check that list, so visitors are stopped before your page loads. Nothing is deleted. The warning comes off after you remove what triggered it, or confirm it was a false positive, and request a review in Google Search Console. Antivirus engines and web filters keep their own lists, and they don't clear when Google does.
Maybe you saw it on your own laptop. Maybe a customer sent a screenshot. Two minutes tells you whether Google is the only list your domain is on, or one of several.
Free, no signup. Shows whether Google lists the domain and which other vendors list it too.
| What visitors see | A full-page red screen before your site loads: “Dangerous site” or “Deceptive site ahead” (phishing), “The site ahead contains malware”, “The site ahead contains harmful programs”. Safari shows the same warning in its own words. |
|---|---|
| Whose list it is | Google Safe Browsing. Chrome, Firefox and Safari all read it. Microsoft Edge reads Microsoft SmartScreen, so an Edge-only warning is a different case. |
| Who can remove it | Only the site owner, through the Security issues report in Google Search Console. Google publishes no API for review requests; nobody can file it for you. |
| How long it takes | Google's help says most reviews are processed within a few days; harmful-download reviews can take longer. |
| If it comes back | Flagged again soon after a review cleared it: Google disables Request Review for 30 days. |
| What €39 buys | Not Google's review: that one is your click, and we prepare the text. It covers every other vendor that lists the domain: a separately written request to each that takes email, prepared text for the rest. |
If the scan shows Google and nothing else, you don't need us. The Search Console review is free and takes a few minutes. Follow the steps below and keep your €39.
If antivirus engines or web filters list the domain too, they keep blocking it in their own products after Google clears it: on visitors' computers, on company networks, at some internet providers. Each has its own inbox or form and wants its own wording. That part is what we do.
Steps 3 and 4 run in parallel. Google's review and the other vendors don't wait for each other.
- 01
Find out what Google found.
In Google Search Console, open Security & Manual Actions → Security issues for your verified property. Google names the category (Social engineering, Malware, Harmful downloads, Hacked content) and lists sample URLs.
- 02
Remove it, or confirm it was never there.
Hacked: remove the injected code, close the way in (usually an outdated plugin or a stolen password), rotate passwords and keys. Never hacked: open the sample URLs from outside your own network and see what a visitor gets. Google re-checks before it lifts the flag either way. We don't do this step and we don't verify it.
- 03
Request the review once, with specifics.
Back in Security issues, tick “I have fixed these issues” and describe, per issue, what was found and what changed. Submit once; duplicate requests don't move the queue. Google's help says most reviews are processed within a few days.
- 04
Ask the other vendors at the same time.
Antivirus engines and web filters keep their own lists and don't follow Google. Each has its own inbox or form and its own wording, and each decides on its own schedule. Asking now only means they don't wait for Google. This is the step we do for €39.
// step 3 in detail: the Search Console review, step by step · step 2: cleaning a hacked website
After you pay €39, once, for this domain: we re-scan it, cache ignored, and send a separately written plain-text removal request to every vendor that takes one by email, within 48 hours and in practice within the hour, with your address as Reply-To. Form-only vendors become dashboard cards with the text prepared. Google Safe Browsing becomes one too, with the exact text for Search Console; we never submit it for you. Replies go to your inbox, not ours.
It does not clean malware. It guarantees the dispatch, not the outcome. If the scan we run right after payment finds no vendor flagging your domain, we refund the full €39 automatically. No subscription, no account.
// free scan · payment only if vendors flag you and there are requests to send
pricing · refund policy · the vendors and how each is contacted
| Day 0 | 12 vendors flagging. Payment, re-scan, 12 separately written requests sent over one hour. |
|---|---|
| Day 3 | 8 of 12 vendors no longer returned the domain. |
| Day 7 | Still 8 of 12. The same eight. |
| Day 15 | All 12 cleared. The verdicts we read were last updated on day 15, so that is the latest day by which every vendor had cleared. |
One dispatch is one dispatch: a case, not a rate. It was a false-positive flag on a site that had never been hacked, which is not the situation most people arrive here in. Vendors re-scan when they review, so a hacked site has to be clean before any of this moves. The customer's own account of that order, in his words:
“ESET flagged our client's website even though it had never been hacked. I wasn't sure whether I could trust an online service with this, but I decided to give it a try. Two weeks later, all 12 vendors that had flagged the site, including ESET, had cleared it.”
// full readings: the case study · in our September 2026 data the median flagged domain carried 11 listings, Google's among them: the report, vendor by vendor
They all check Google Safe Browsing before loading a page, so one listing reaches all three. Microsoft Edge checks Microsoft SmartScreen instead; a warning that appears in Edge only is a Microsoft case, and our scan cannot see SmartScreen.
Yes. A genuine login page, or a page that looks like another brand's, can be read as phishing. Google still re-checks before it lifts the flag, so say in the review what the page is and why it is legitimate.
Google's help says most reviews are processed within a few days; harmful-download reviews can take longer. Every other vendor decides on its own schedule. We don't promise a date.
No one but the site owner can. Google publishes no API for review requests, so it is a manual step in Search Console. We prepare the text to paste; the €39 covers the other vendors that list the domain.
If a site is flagged again shortly after a review cleared it, Google disables Request Review for 30 days (Repeat Offender status). The cause is almost always a way back in that was never closed: an old admin account, a leftover file, an unpatched plugin. Find it before the next review.
// related: check Google Safe Browsing only · what “Deceptive site ahead” means · the warning keeps coming back · Facebook rejected the ad too? · blocked by an antivirus or firewall instead?