Key takeaways
- A website blocklist (or blacklist) is a list of sites judged unsafe by a browser, search engine or antivirus product. Google Safe Browsing reaches the most people.
- You can check the big three for free: Google’s Transparency Report, Norton Safe Web and McAfee’s site lookup.
- Getting removed always starts with a full clean-up. A review request sent before the site is clean can make things slower, not faster.
- Google says most reviews take from a few days to a few weeks. Each vendor runs its own process, so you request removal from each one separately.
If visitors see a red warning page, or your site is flagged in search results, it has almost certainly been added to a website blocklist. The fix is the same every time: find and remove what caused the flag, then ask each blocklist to review your site. This guide explains who runs the main lists, how to check them, and how delisting works.
What is a website blacklist?
Security companies scan the web for pages that spread malware, host phishing forms or carry injected spam. Flagged sites go on a list, and browsers, search engines and antivirus apps use it to warn people away. “Blacklist” and “blocklist” mean the same thing.
Most small business sites are flagged because they were hacked, not because the owner did anything wrong. WordPress.org lists being “blacklisted by Google, Bing, etc.” as one of the clearest signs of a compromise (WordPress.org). Our checklist on has my website been hacked covers the other warning signs.
Which blocklists matter most?
| Blocklist | Where people see it | How to check | How to get reviewed |
|---|---|---|---|
| Google Safe Browsing | Chrome and other browsers, Google Search, Gmail, Android | Transparency Report Site Status, or Search Console | Request a review in Search Console’s Security Issues report |
| Norton Safe Web | Norton antivirus and browser extensions | safeweb.norton.com | Verify you own the site, then ask for a re-evaluation |
| McAfee WebAdvisor | McAfee antivirus and browser extensions | McAfee’s site lookup (sitelookup.mcafee.com) | Submit a review request through the same tool |
Google Safe Browsing
This is the big one. Google says Safe Browsing helps keep “over five billion devices” safer. It powers warnings in Chrome and other browsers, flags in Google Search and link checks in Gmail (Google Safe Browsing). If Google flags your site, most of your visitors will see a warning.
The label tells you the problem. “This site may be hacked” means someone added content without permission. “This site may harm your computer” points to malware or dangerous downloads (Google Search Console Help).
Norton Safe Web
Norton rates sites from automated scans and user reports. Owners can ask for a re-evaluation after verifying that they own the site (Wikipedia: Norton Safe Web). WordPress.org suggests registering with Norton as well as Google Search Console and Bing Webmaster Tools.
McAfee WebAdvisor
McAfee rates sites as safe, suspicious or unsafe, using its TrustedSource web reputation system (Wikipedia: McAfee SiteAdvisor). Its site lookup tool is where you check a rating and ask for a review.
How do I run a website blacklist check?
- Google: enter your address in the Transparency Report’s Site Status tool (transparencyreport.google.com/safe-browsing/search).
- Search Console: if your site is verified, open Security Issues. It lists the exact problems and sample pages.
- Norton and McAfee: look up your domain at safeweb.norton.com and on McAfee’s site lookup, and note each rating.
- A second opinion: WordPress.org lists VirusTotal and Sucuri SiteCheck as remote scanners that check your pages from the outside.
- Email: if emails are bouncing, check that too. WordPress.org warns that hacked sites are often used to send spam, which can get your server blocked for email.
Note each result and the date for your review requests.
How do I get my website removed from a blacklist?
Delisting has two parts: clean, then ask. Skipping the first part is the most common mistake we see.
- Find everything that caused the flag. Malware, spam pages, rogue redirects and phishing pages on your website can all trigger a listing. Search Console’s sample pages are a start, but there’s usually more.
- Remove it and close the way in. Clear out infected files, rogue admin users and backdoors, then fix the weakness the attacker used. Our guide for when your website is hacked explains the full recovery.
- Request a review from Google. In the Security Issues report, choose Request Review. Explain the problem, what you fixed, and the result.
- Ask Norton and McAfee separately. A Google review doesn’t update anyone else.
If you’d rather not do this yourself, our hacked website repair service handles the clean-up and the review requests.
How long does it take to get off Google’s blocklist?
Google says a review for malware or hacked content “can take from a few days to a few weeks” (Search Console Help). Two rules matter:
- Fix every issue first. Google asks you to fix all listed issues on all affected pages before you request a review.
- Don’t keep resubmitting. Requesting a review too early can slow later ones. Sites that flip between clean and infected can be labelled Repeat Offenders, which blocks review requests for 30 days (Google Search Central).
Norton and McAfee don’t publish firm timeframes, so keep checking after you apply.
How do I stop it happening again?
Sites get re-listed when the clean-up misses something or the original weakness is still there. Keep plugins and themes updated, use two-factor login for every admin, and verify your site in Search Console so you hear about problems early. Secure web hosting with regular offsite backups helps too, and our website maintenance plans handle the rest for you.
Frequently asked questions
Can I pay to be removed from a blacklist faster?
No. Google, Norton and McAfee don’t sell faster delisting, so be wary of anyone who says they can skip the review. What speeds things up is a thorough clean-up and a clear review request. A request that fails because something was missed costs you more time.
My site is clean now. Why is the warning still showing?
Blocklists only update after a review, and each vendor runs its own. Check that you’ve asked Google, Norton and McAfee separately. Google says labels can take a few days to clear after a successful review. If a review fails, the site usually still has hidden malware.
Do I need Google Search Console to get off Google’s list?
Yes, for hacked sites and malware. Google’s review requests are made in the Security Issues report in Search Console, so you or your web team must verify the site first. It’s free, and Google can then email you about problems before customers notice.
Will being blacklisted hurt my Google rankings?
It can. Warning labels and full-page browser warnings stop many people clicking through, so traffic drops quickly. Hacked spam pages can also appear in search results instead of your real pages. Once the site is clean and the review succeeds, the warnings come off.
Sources
- Google Safe Browsing, Google, accessed 13 November 2026
- Why is my site labeled as dangerous in Google Search?, Google Search Console Help, accessed 13 November 2026
- Security issues report, Google Search Console Help, accessed 13 November 2026
- Google Safe Browsing Repeat Offenders Policy, Google Search Central, accessed 13 November 2026
- FAQ My site was hacked, WordPress.org, last updated 26 July 2026
- Norton Safe Web, Wikipedia, accessed 13 November 2026
- McAfee SiteAdvisor, Wikipedia, accessed 13 November 2026