Skip to content

Requesting Google to Review Hacked Sites and Remove the “Deceptive Site Ahead” Warning

Google displays a “Deceptive Site Ahead” warning when it suspects a website contains malware, phishing content, or other security threats. This warning blocks visitors with a red screen and can severely impact traffic and trust.

If your site has been hacked and you’ve cleaned it, you must request Google to review it so the warning can be removed.

  • Google blacklists sites that appear compromised or used for phishing.
  • Visitors see a red warning screen in Chrome and other browsers.
  • The warning remains until Google verifies the site is safe again.
    • Remove malware, phishing scripts, or injected code.
    • Patch vulnerabilities (update CMS, plugins, server software).
    • Secure passwords and accounts.
    • Use your administrator account.
    • Navigate to your site’s dashboard.
    • In the left sidebar, click Security Issues.
    • Review the problems Google detected.
    • Scroll down and check the box: “I have fixed these issues.”
    • Click the Request a Review button.
    • Provide details of the steps you took to resolve the issues.
    • Google typically takes a few days to review.
    • The warning will remain until Google confirms the site is safe.