How to remove the "Deceptive site ahead" warning from your website

The red "Deceptive site ahead" (or "Dangerous site") warning appears when Google Safe Browsing believes your site hosts phishing pages, malware or unwanted software. Chrome, Firefox and Safari all use these lists, so the warning blocks nearly every visitor. In most cases the site was hacked and someone uploaded a phishing kit or malicious redirect. The warning is removed after you clean the site and Google re-checks it.

Before you start

• Verify your site in Google Search Console if you have not already.
• Take a backup of the current state for investigation, and note JetBackup restore points from before the problem.

Find out what Google detected

1. In Search Console → Security & Manual Actions → Security issues, read the issue type and sample URLs.
2. Check the status on Google's Safe Browsing site status page for your domain.
3. Visit the sample URLs (carefully, preferably with curl) to see what is there.

Clean the site

1. Look for phishing folders. Hackers often upload folders imitating banks or webmail under public_html or wp-content. Sort File Manager by date modified to spot recent additions.
2. Run a malware scan. On MdmHost hosting, Imunify360 scans files; see scan your website for malware.
3. Check for redirects in .htaccess, theme files and the database (injected scripts in posts or options).
4. Restore if needed. If the infection is widespread, restore files and the database from a clean JetBackup copy, then update everything.
5. Close the hole. Update WordPress, plugins and themes, remove unused ones, change all passwords (cPanel, FTP, database, admin users) and remove unknown admin accounts. Our WordPress hacked site cleanup guide has a full checklist.

Request a review

1. In Security issues, tick I have fixed these issues and click Request review.
2. Describe what you found and removed, and how you secured the site.
3. Reviews for phishing are often completed within a day; malware reviews can take a few days.

FAQ

Why was my site flagged if I did nothing wrong?

Most flagged sites are hacked through outdated plugins or stolen passwords, not created to deceive.

Does the warning affect email?

Links to your domain in emails may also be flagged, and spam filters may score your mail worse.

How do I avoid it in future?

Keep software updated, use strong unique passwords and two-factor login, and keep backups.

Next steps

• Recover a hacked website in cPanel
• JetBackup full account restore
• Protect WordPress login