Free tool, no account required

Free Website Malware & Safety Checker

Check whether a domain or URL is flagged for malware, phishing, or unsafe software on Google Safe Browsing threat lists. Free instant safety check.

Also known as: Safe Browsing check, malware and phishing scanner
Evidence shown with sourceNo account requiredNo invented metrics

Run a real check above

Submit a public URL, domain, or keyword. Novaverb will show only the evidence this tool can actually retrieve or measure.

Evidence model

Know what the result proves

This check proves whether a URL currently matches Google Safe Browsing's live threat lists for malware, social engineering or unwanted software. A clean result means no current listing, which is a present-tense state and not a certificate: a site can be compromised and not yet listed, and a listing can be lifted after a site is cleaned.

1. Source

A live Safe Browsing threat-list lookup. The result identifies where its evidence came from.

2. Boundary

This reflects the Safe Browsing threat-list status at the moment you check. A clean result means no active listing was found - it is not a guarantee that a site is safe, nor a full malware scan.

3. Next action

Use the finding to verify a problem, then connect a workspace when you need history, monitoring, or site-wide analysis.

Website safety explained

What a Safe Browsing check does - and does not - prove

Safe Browsing maintains constantly-updated lists of URLs known to host malware, phishing, or unwanted software. A match is strong evidence a page is dangerous right now. The absence of a match means the URL isn't on those lists at this moment - it is not proof the site is clean, because new threats are listed only after they're detected.

The threat categories

  • Malware - pages that install malicious software on a visitor's device.
  • Social engineering - phishing pages that impersonate a trusted site to steal credentials.
  • Unwanted software - deceptive downloads that change browser or system behavior.
  • Harmful applications - apps flagged as harmful on mobile platforms.

If your site is flagged

A listing can appear because a site was hacked, an ad network served malware, or a third-party script was compromised. Remove the malicious content, then request a review - and monitor the status so you know the moment it clears.

Get the right answer

What to submit - and what to avoid

Submit the public URL you want checked. Scheme, www and path are normalized. Reading a clean result as a guarantee that a site is safe to transact with is the misreading this section exists to prevent, because a threat list reports known threats and cannot report the ones nobody has reported yet.

Use it like this
yourdomain.comAny public address form works - we check it against Google's live threat lists. http or https, with or without www, a bare domain or a full path - we normalize it for you.
https://www.yourdomain.com/pageA specific URL is fine too; we check exactly what you submit.
Avoid this
Reading 'no threats' as 'safe forever'A clean result means no listing right now, not a permanent guarantee - re-check over time.
Public methodology

Exactly how this result is produced

The address is normalized and the URL is submitted to Google Safe Browsing's live threat lists. Any match for malware, phishing or unwanted software is reported with the category returned. A result with no match is reported as no current listing, phrased in the present tense, rather than as a permanent verdict of safety.

  1. We normalize the address and submit the URL to Google Safe Browsing's live threat lists.
  2. We report any match for malware, phishing (social engineering) or unwanted software.
  3. We report a clean result as 'no current listing' - an honest present-tense state, not a permanent verdict.
Built on public standards

The international standards this check applies

Google Safe Browsing maintains the threat lists and defines the categories reported here, and this check reports its answer without adding a judgment of its own. The present-tense phrasing follows directly from how those lists work: they record what is known now, and they are updated continuously in both directions.

GoogleSafe Browsing
Safe Browsing threat lists

Checks the URL against the malware, phishing and unwanted-software threat lists.

Read the specification
We list a standard only where this tool genuinely reads or measures against it. Where a signal is outside a live check, the result says so instead of implying coverage.
Common questions

Website Safety Checker FAQ

What does the Website Safety Checker check?

It checks whether a URL is currently flagged on Google Safe Browsing threat lists for malware, phishing or unwanted software, reporting the listing status at the moment you run the check.

Does a clean result mean my website is safe?

No. A clean result means no active Safe Browsing listing was found at check time. It is not a guarantee of safety nor a full malware scan, and status can change if a threat later appears.

What is the difference between malware and phishing flags?

A malware flag means the site is listed as distributing harmful software. A phishing flag means it is listed as deceptively collecting credentials or data. Both are Safe Browsing threat categories that can trigger browser warnings.

Why does my site show as flagged for unwanted software?

Safe Browsing lists unwanted software when a site distributes deceptive or harmful programs, such as bundled installers that change settings. Review recent uploads, scripts and third-party code, then request review once the issue is removed.

How do I fix a site flagged by Safe Browsing?

Identify and remove the malware, phishing pages or unwanted software, clean any injected code, secure the compromised entry point, then request a review through the appropriate console so the listing can be reassessed and lifted.

Is this a full malware scan of my server?

No. It reports Safe Browsing threat-list status at check time, not a deep scan of your files, database or server. A clean result does not rule out infections that have not been listed.

Why does website safety status matter for SEO?

A Safe Browsing listing can trigger red browser warnings and suppress your site in results, sharply cutting traffic and trust. Monitoring listing status helps you catch and resolve threats before they damage visibility.

Can a safe site later become flagged?

Yes. The check reflects status only at that moment. If your site is later compromised and added to a threat list, a previously clean result no longer holds. Re-check regularly, especially after security incidents.

What should I do if my site is clean but I still worry?

A clean listing is reassuring but limited. Keep software patched, restrict access, monitor for injected code, and re-run the check periodically, since Safe Browsing status can change the moment a new threat is detected.

How current is the Safe Browsing result?

The result reflects threat-list status at the time you run the check. Listings are added and removed as threats appear and are resolved, so treat each result as a point-in-time reading rather than permanent.

More free checks

Explore all Novaverb Free Tools

Website SEO CheckerCrawl coverage, indexable pages, and internal links
Keyword Research ToolCheck the exact query's available search volume, keyword difficulty and …
SERP CheckerInspect the returned organic results for a keyword and country, …
Website Security CheckerAudit website security posture, TLS/SSL certificates, HTTP security headers, and …
WordPress Security Configuration CheckerCheck eight externally observable WordPress configuration areas: XML-RPC, wp-login.php, debug …
Server Response Time CheckerMeasure server Time to First Byte (TTFB), DNS lookup, TCP …
Backlink CheckerCheck the backlink and referring-domain data available for a domain. …
Robots.txt CheckerTest and validate robots.txt rules, User-Agent directives, blocked paths and …
Sitemap CheckerDiscover sitemap declarations, inspect the root document and fetch a …
Meta Tag CheckerCheck page title length, meta description, H1 heading structure, Open …
HTTP Status & Redirect CheckerTrace HTTP status codes (200, 301, 302, 404, 500) and …
Website MonitorRun one live availability check and retain an evidence sample …
HTTP/2 TestCheck whether the exact submitted hostname negotiates HTTP/2 through TLS …
HTTP/3 TestTest whether your web server supports HTTP/3 over QUIC with …
Website Performance TestCompare HTTP response timing from available probe locations and inspect …
GEO CheckerInspect observable page signals that support retrieval, answer extraction, attribution …
Core Web Vitals CheckerCheck 75th-percentile real-user LCP, INP and CLS from Chrome field …
PageSpeed CheckerRun one Lighthouse lab audit to inspect performance, accessibility, best-practices …
Knowledge Graph CheckerLook up matching entities for a brand, person, product or …
Keyword Gap CheckerFind ranking keywords observed for a competitor and not observed …
Competitor Top PagesFind the pages with the highest estimated organic traffic in …
Check → understand → fix

Turn this check into a verified fix

Every Novaverb free tool is one funnel: run the check, understand the evidence, then fix it and prove it is resolved with a fresh re-check - no invented pass states.