Domain & Website SEO Tools
Blacklist Lookup
Check if a URL is flagged by Google Safe Browsing as malicious.
- Free to use
- No sign-up
Working on it…
Running the tool — your results will appear here in a moment.
No results yet
Enter the details above and run the tool to see your results here.
About this tool
Check whether a URL is flagged by Google Safe Browsing as malware, phishing or unwanted software. It is a quick way to screen an unfamiliar address before you visit it, or to confirm that your own site has not been marked as dangerous.
How to use it
- Enter the full URL, for example
https://example.com. - Run the check.
- Read the result: clean, or the type of threat reported.
What the result means
- No threats found – Google Safe Browsing has no current warning for the address.
- Malware – the site is known to distribute harmful software.
- Social engineering – phishing or deceptive pages that trick visitors into sharing details.
- Unwanted software – downloads that change settings or behave deceptively.
Why it matters for site owners
When a site is flagged, Chrome, Firefox and Safari show a full-page red warning and most visitors leave immediately. Search traffic and advertising can also be affected until the problem is resolved.
If your own site is flagged
- Sign in to Google Search Console and open the Security issues report.
- Find and remove the malicious code, pages or files — often from an outdated plugin or a stolen password.
- Update your CMS, themes and plugins, and change all passwords.
- Request a review in Search Console once the site is clean.
Limitations
Results depend on Google's database at that moment and require a Safe Browsing API key to be configured. A clean result is reassuring but not a full security audit, and it does not check email spam lists.
Related tools
- Website Malware Scanner – scan a page for known threats
- Suspicious Domain Checker – look for phishing warning signs
- SSL Checker – confirm encrypted connections
Step by step: screening a link before you click
- Copy the address from the message without opening it (long-press on phones, right-click → Copy link on computers).
- Paste it here and run the check.
- If a threat is reported, delete the message and do not visit the site.
- If it is clean but still looks odd, run it through Suspicious Domain Checker as well.
How sites end up flagged
- Outdated plugins or themes that attackers use to inject malicious code
- Stolen admin or hosting passwords
- Hacked advertising or analytics scripts loaded from third parties
- Deliberate phishing pages imitating banks, shops or delivery companies
Prevention for site owners
Keep your CMS, themes and plugins updated, remove anything you no longer use, enable two-factor authentication on admin and hosting accounts, and take regular backups so you can restore a clean copy quickly. Adding your site to Google Search Console means you receive an email if Google ever detects a problem.