Domain reputation check
A domain reputation check asks the security services that browsers, antivirus products and web filters consult whether they currently consider a domain safe. The free check on unflagdomain queries Google Safe Browsing, around 90 antivirus and URL-reputation engines, Sucuri SiteCheck and Norton Safe Web, and names every vendor flagging the domain. It reports what those third parties think, not whether the site is infected: a cleaned site can carry a stale flag for weeks.
Reputation lives outside your server. You can't see it from your own browser, because your session is cached and trusted while a first-time visitor gets the warning. One scan shows your domain the way strangers' software sees it.
// free · no account · results in seconds
| What it checks | Google Safe Browsing, around 90 antivirus and URL-reputation engines, Sucuri SiteCheck and Norton Safe Web. |
|---|---|
| What you get | Every vendor flagging the domain, by name, with the kind of list it is and how it takes a removal request. Matched against a catalog of 135 vendors. |
| A good result | No vendor flagging. Reputation is pass or fail per vendor; there is no single universal score. |
| What it is not | An email sender score, an SEO “spam score”, an IP blocklist lookup, or a malware scan of your files. |
| Cost | Free, as often as you like. €49 once per domain only if you want the removal requests sent for you. |
Browsers and search
Google Safe Browsing feeds Chrome, Safari and Firefox and protects over five billion devices every day. A listing puts a full-page red warning in front of your site for every one of them. It clears only through a manual review that the site owner requests in Google Search Console.
Antivirus URL engines
ESET, Bitdefender, Kaspersky, Sophos and dozens of others each keep their own URL database. Their products block the page on the visitor's own machine, so you never see it happen. Each vendor has its own false-positive channel, and clearing one does not clear the next.
URL-reputation feeds and web filters
Engines such as AlphaMountain, Fortinet, Webroot and Forcepoint classify domains for corporate firewalls, DNS filters and other security products. In our October 2026 report these did much of the flagging: AlphaMountain listed 67% of flagged sites, Fortinet 48%, Webroot 40% and Forcepoint 30%.
Domain blocklists
Spamhaus and similar lists track domains seen in spam or abuse. Mail systems read them, so a listing tends to show up as email that links to your site bouncing or landing in junk, rather than as a browser warning.
// the numbers, vendor by vendor: which security vendors actually block websites · all 135 vendors and how each is contacted · look up your category at each web filter
Search for “domain reputation” and half the results are about email: sender scores, Google Postmaster Tools, IP blocklists. That is the reputation of the mail you send, judged by mailbox providers from your sending history. This check is about the website: whether security products let people reach it. The two meet in one place, the domain blocklists above, and are otherwise fixed by different people in different places.
If your problem is mail landing in spam, start with email domain reputation vs. website blocklisting. If an SEO tool is showing you a “spam score”, that is a link-profile metric no security vendor reads; here is what it does and doesn't mean. And if you want the longer explanation of how vendors arrive at a verdict, read what domain reputation is.
Clean means no vendor was flagging the domain at the moment of the scan. It describes that moment only, so check again after a migration, a plugin incident, or before you launch on a domain you just bought.
Flagged means at least one vendor considers the domain unsafe and is warning people away from it. It is a label on a list, not a takedown, and it is rarely one list. In our October 2026 blocklist report the median flagged domain was listed by 6 vendors at once, two in five by more than ten, and only 18% by exactly one. The corpus is people checking their own sites, most of whom already suspect a problem, so read that as what a flag looks like, not how common flags are.
- 01
Find out who is flagging the domain
Run the check. It names every vendor currently listing the domain, the kind of list it is, and the channel that vendor accepts a removal request through. Reputation is per vendor, so the fix is too.
- 02
Clean the site, or confirm it is a false positive
If the site was hacked, remove the injected content, close the way in and rotate passwords. Vendors re-scan the live URL when they review a request, so a site that is still infected keeps its flag. If nothing was ever wrong, say so in the request: false positives are common.
- 03
Ask each vendor for a re-check through its own channel
Google Safe Browsing is a manual review the owner requests in Search Console. Antivirus and reputation vendors take a web form or an email, each in its own format. Few of them look again unprompted; asking is what moves it.
- 04
Wait for the re-scan, then check again
Vendors that act usually do so within days; some take weeks and some never reply. Nobody can promise a date, because the decision is each vendor's. Re-run the check to see which entries have cleared.
// step by step: remove or delist a website from a blacklist · the Google Safe Browsing review · per-vendor false-positive guides
Sending a correct request to a dozen vendors by hand is an afternoon of forms and inboxes. For €49, once, we send a separately written request to every flagging vendor that takes one by email, with your address as Reply-To, and prepare the text for form-only vendors and for Google. We guarantee the dispatch, not the outcome: each vendor decides. If the scan we run right after payment finds no vendor flagging your domain, the €49 is refunded automatically.
// free scan · payment only if vendors flag you and there are requests to send
A good domain reputation means no security vendor is flagging the site: browsers, antivirus products and web filters all let visitors through. There is no single universal score. It is pass or fail per vendor, and a clean result across all of them is the goal.
Enter the domain in the form on this page. The check queries Google Safe Browsing, around 90 antivirus and URL-reputation engines, Sucuri SiteCheck and Norton Safe Web, then names each vendor flagging it. No signup and no card; €49 applies only if you later want the removal requests sent.
No. Email reputation is how mailbox providers judge the mail you send, based on your sending history, and you read it in tools such as Google Postmaster Tools. This check is about the website: whether security products let people reach it. The two meet only at domain blocklists like Spamhaus, which mail servers consult.
No. This is a domain and URL check. IP blocklists, the kind mail servers consult about a sending address, are a different set of lists with different removal procedures, and a clean result here says nothing about them.
Reputation problems are silent. The site loads for you because your browser has a cached, trusted session, while a first-time visitor gets the warning. The usual causes are a hack you have not noticed, a hack you already cleaned, a neighbour on shared hosting, or a plain false positive. The check shows which vendor flagged it.
Yes. Listings attach to the domain name, not to its owner, so a domain that was abused under a previous registrant can still be listed when you start using it. Some web filters also treat newly registered domains cautiously on age alone. Check a domain before you buy it or launch on it.
It depends on each vendor. Once the site is clean and a correct request has reached them, vendors that act usually do so within days, and some take weeks. In the one dispatch we have measured publicly, 8 of 12 vendors cleared within 3 days and all 12 by day 15. Nobody can guarantee a date.
// related: is my website blacklisted? · how vendors score a URL · five ways to check a domain · check a URL against Safe Browsing