Request a review

You must request a review from Google to have your page or site unflagged as dangerous or possibly deceptive to users.

You'll need

  • Knowledge of shell/terminal commands

What you'll do

1. Prerequisites

Before requesting a review, confirm that you've taken the following steps:

  • Verified ownership of your site in Search Console
  • Cleaned your site of the hacker's vandalism
  • Corrected the vulnerability
  • Brought your clean site back online

2. Double-check that your pages are available and clean

To be safe, use either Wget or cURL to view pages on your site, such as your homepage and a URL modified by the hacker; these should now be clean. If so, and you're confident that same applies to the rest of the pages on your site, it's time to request a review.

3. Request a review

Before requesting a review, be sure that the problem is truly fixed; requesting a review if the problem still exists will only prolong the period of time that your site is flagged as dangerous.


  1. Complete the review at This review removes phishing warnings from phishing pages that have been cleaned. It also serves as a reporting tool for site owners who believe their page was incorrectly flagged for phishing.

Malware or Spam

  1. Open the Security Issues report in Search Console. The report will probably still show the warnings and sample infected URLs you saw before.
  2. If you believe that the sample URLs listed are all clean, select Request a review. In order to submit a review, we ask that you provide more information that the site is cleaned of the hacker's damage. For example, for each category within Security Issues, you can write a sentence explaining how the site was cleaned (for example, "For Content injection hacked URLs, I removed the spammy content and corrected the vulnerability: updating an out-of-date plugin.").

4. Wait for the review to be processed

  • Malware review processing time: Reviews for sites infected with malware require a few days to process. Once the review is completed, the response will be available within your Messages in Search Console.
  • Hacked with spam review process time: Reviews for sites hacked with spam may require up to several weeks to process. This is because spam reviews can involve manual investigation or a complete reprocessing of the hacked pages. If the review is approved, Security Issues will no longer display hacked category types or example hacked URLs.
  • Phishing review processing time: Phishing reviews take about a day to process. If successful, the user-visible phishing warning will be removed and your page may again surface in search results.

If Google finds that your site is clean, warnings from browsers and search results should be removed within 72 hours.

If Google determines that you have not fixed the problem, the Security Issues report in Search Console will usually display more sample infected URLs to assist your next investigation. Malware or hacked with spam site warnings will remain in search results and/or browsers as a caution to protect users.

Final steps