Visitors open your website and Chrome shows a full red page: "Dangerous site. Attackers on the site you tried visiting might install harmful programs that steal or delete information." Firefox, Safari and Edge show similar warnings.
This is a malware warning from Google Safe Browsing. Here is how to remove it.
Key takeaways
- The red "Dangerous site" page is Google Safe Browsing's malware or unwanted software warning.
- It differs from "Deceptive site ahead", which is about phishing.
- Search Console shows which pages Google found and lets you request a review.
- Malware reviews usually take a few days once the site is fully clean.
Dangerous versus deceptive
Chrome has two main red pages. "Dangerous site" is about malware or unwanted software. "Deceptive site ahead" is about phishing. The fixes overlap, but the cause you look for is different. If you see the deceptive version, follow our Deceptive site ahead guide.
Step 1: Open Search Console
Verify your domain in Google Search Console if you have not already, then go to Security & Manual Actions, Security Issues. Note the issue type, such as Malware or Harmful downloads, and every sample URL listed.
Step 2: Locate the malware
Look in these places first:
- Scripts injected into page headers, footers or the database, often obfuscated.
- Recently modified files in your theme, plugins or root directory.
- Files Google marked as harmful downloads.
- Third-party scripts or embeds loaded from domains you do not recognise.
- Redirects in .htaccess or server configuration that only trigger for some visitors.
Your hosting provider can often show recently changed files and run a server-side malware scan.
Step 3: Clean and secure
Remove the malicious code or restore a clean backup, update all software, delete unused plugins and themes, and change every password. Check with Sucuri SiteCheck and VirusTotal that nothing remains.
Step 4: Request a review
In Search Console, click Request a Review and explain what you found, what you removed and how you prevented reinfection. Malware reviews typically complete within a few days. If the review fails, Google shows new sample URLs to check.
Step 5: Clear the knock-on listings
A malware detection often spreads to antivirus and web filter vendors. After Google clears you, re-check VirusTotal and request removal from every remaining vendor. Our removal timelines article shows what to expect.
Frequently asked questions
Why do I not see the red page myself?
You may have clicked through it before, or your browser has the site cached. Test from another device or in a private window.
Can I remove the warning without Search Console?
Google also re-checks sites automatically, but that can take weeks. Search Console is the fast route.
What if Google says my site is clean but the warning remains?
Clear your browser cache and wait a few hours for the update to propagate. Other browsers update on their own schedule.
Is it a false positive?
Sometimes. If you find nothing after a thorough check, request a review explaining why, as described in our Safe Browsing false positive guide.