What does it mean to be flagged by Google, and how can I check a website's reputation?
What being flagged means
Google checks the pages it indexes for malicious scripts or downloads, policy violations and other problems. Depending on what it finds, it may hide a result, label it, or add the page to the Safe Browsing list, which Google says is used by most major browsers.
In practice, people see one of these:
- A label in Google Search, such as "This site may harm your computer" or "This site may be hacked".
- A full-page browser warning shown before the site opens, whether the visitor came from Google or somewhere else.
The Security issues report in Search Console groups these problems into hacked content, malware and unwanted software, and social engineering such as deceptive pages.
How to check any website
You do not need to own a site to check it. Open Google's Safe Browsing site status page in the Transparency Report and enter the URL. Google's help page points owners who are not in Search Console to this tool, and says that if it marks your site as dangerous, you need to fix it.
Google's Safe Browsing FAQ says its systems scan the web index daily, and unsafe sites are added to the list within minutes of detection. To report a dangerous site you find, use the malware and phishing report forms linked from the Safe Browsing home page.
How to check your own site
- Verify the site in Search Console.
- Open the Security issues report. If there are no problems you will see a green tick. If there are, each issue lists sample URLs. These are a sample, not the full list.
- Open the Manual actions report. This shows whether a person at Google has taken action for breaking the spam policies.
- Search Google using site: with your domain and spam terms that should not appear on your site, to find pages an attacker may have added.
- Fix every affected page, then select Request Review in the relevant report. Explain the issue, how you fixed it and the result. Malware reviews take a few days; spam caused by a hack can take several weeks.
For phishing warnings, Google's help page says there is a separate Safe Browsing report form for reconsideration.
Flagged is not the same as site reputation abuse
The phrase sounds similar, but Google's site reputation abuse policy is a spam policy, not a security warning. It applies when third-party content is published on a host site mainly to take advantage of that host's established ranking signals. Google's examples include a medical site hosting a low-quality "best casinos" page, or an educational site hosting sponsored third-party pages that are syndicated across the web.
Google says the policy does not cover things like press releases, syndicated news, user-generated content, editorial columns, advertorials produced with the host site's close involvement to share content directly with readers, or affiliate links treated appropriately.
The consequences are also different. A Safe Browsing flag puts a warning in front of visitors. Site reputation abuse affects rankings. Outside the European Economic Area, affected pages may receive a manual action. Inside the EEA, following Google's update on 28 August 2026, they may be treated separately from the main site without a manual action, so they rank on their own merits.
Our Google Spam Policy Audit checks a site against Google's spam policies one by one. For security warnings, our Security Audit checks headers, DNS, SPF, DKIM, DMARC and known CVEs.
Sources
- Search Console Help: Why is my site labelled as dangerous in Google Search?
- Transparency Report Help: Safe Browsing FAQs
- Google Safe Browsing
- Search Console Help: Security issues report
- Search Console Help: Manual actions report
- Google Search Central: Spam policies for Google web search
- Google Search Central: Latest documentation updates
Frequently asked questions
How long does it take for a Google warning to disappear after a fix?
Google's Safe Browsing FAQ says a site is rescanned after a malware review and is typically removed from the list within 24 hours if the scan is clean. Google's help page says browser and search warnings can take a day or two to clear after an approved review, and the transparency report can update before browser warnings do, so allow a day before assuming a warning is still active.
Can my site be flagged if I did nothing wrong?
Yes. Google's help page on sites labelled as dangerous gives examples: a hacker may have compromised the site, or a contractor you hired may have broken the spam policies without your knowledge. That is why Google recommends registering in Search Console in advance, so it can notify you and explain any problems it finds.