Chrome Shows a Red 'Dangerous Site' Warning on My Website

What's happening

Chrome's red "Dangerous site" page means Google has flagged your website as harmful to visitors, most often because the site was hacked and is now hiding harmful code or a fake login page. The first safe thing to do is look your site up in Google's free Safe Browsing site status tool, which tells you what Google found without you clicking past the warning.

Older versions of Chrome, and other browsers that use Google's list, may say "Deceptive site ahead" or "The site ahead contains malware" instead. The wording changes with what Google found, but the message is the same: Google thinks your site could hurt the people who visit it. Most visitors will turn back, which is the point of the warning.

Your site isn't gone, and your content is almost always still there. This is a cleanup job.

Why it happens

Usually, someone got in through an outdated plugin, theme, or WordPress version, or a weak password. Then they planted something harmful: code that sends visitors to scam pages, a fake login or payment form, or a file that tries to install bad software. You often can't see it yourself, because many hacks hide from the site owner and only show to visitors. For the bigger picture, see My WordPress site was hacked.

What you can safely try

• Check the Safe Browsing site status tool rather than clicking through the warning. The page behind it may try to harm your computer too.
• Open the Security issues report in Google Search Console if your site is set up there. It lists the problem and example pages. Here's what that report means.
• Change your passwords for WordPress, hosting, and email from a device you trust.
• Don't ask Google for a review yet. If the site isn't fully clean, the review fails and the warning stays.
• Don't delete files you don't recognize. Attackers hide code inside real WordPress files, so deleting at random can break the site and still miss the infection.

When to call us

We work on business websites, and a flagged site is exactly the kind of cleanup we do. We find and remove the harmful code, close the gap the attacker used, and then help you send Google a clear review request. Lifting the warning is Google's decision, made on Google's timeline. Our part is making sure the site is genuinely clean before that request goes in. We clean it up at a flat rate you approve before any work starts. Start with our Hacked Site Cleanup.