Knowledge · Google· 6 min read
Removing a Google warning: how to get your website off the blacklist
If Google detects malicious code or spam on a website, it warns visitors in search and in the browser. The warning doesn't disappear by itself, only after a clean-up and a successful review.
Which warnings exist
- Notice in the search results that the site may have been hacked.
- Red full-screen warning in Chrome, Firefox or Safari about dangerous content.
- Warning about deceptive content when phishing pages have been detected.
Behind all of them is Google's Safe Browsing service, which other browsers also use. That's why a block has an effect far beyond Google search.
The path to removal
- Verify the website in Google Search Console, if not already done.
- Read in the “Security issues” report which addresses and types of problems Google reports.
- Completely remove malicious code, spam pages and backdoors and close the point of entry.
- Let spam addresses expire cleanly so that Google removes them from the index.
- Request a review in Search Console and briefly describe what was cleaned.
Typical mistake
A request made while remnants are still present will be rejected. Repeated rejections can delay the next review.
How long it takes
After a request, Google usually reviews the site within a few days, often faster for phishing reports. The spam pages then disappear gradually from the index, which can take a few weeks.
Ranking
Once the warning has been lifted and the index cleaned, visibility usually recovers. The shorter the warning was active, the smaller the damage.