Skip to main content
HostTracker
HostTracker
website monitoring service
Status pages Instant check Price
Login Register

Google Safe Browsing check

We check against Google's Web Risk lists - the same data behind Safe Browsing warnings - for phishing, malware and unwanted software, using a URL, domain or IP address.

Prefer round-the-clock protection instead of a one-off check? Start continuous web-risk and website defacement monitoring and get alerted the day your site is flagged.

Examples: 300+ locations worldwide · results in about 10 seconds

You've used today's checks

Start the 30-day trial Already have an account? Log in
{{error.message}}

Unlock the full report

30-day free trial · cancel anytime

Loading plans…
See all plans & pricing
Recommended
{{ plan.name }}
{{ money(priceMo(plan)) }}/mo
  • 1 website · all monitoring types
  • {{ plan.maxTaskCount == null ? 'Unlimited' : plan.maxTaskCount }} monitored sites
  • All check locations in the report
  • TLS, headers & timing details
  • Scheduled reports
  • REST API access
Start the 30-day trial
Billed only after your trial · Compare all plans

Web risk checker solution

Monitor your website's presence in Google's Web Risk lists with our integrated checking service.

Find out more

Web risk monitoring automation

Set up round-the-clock automated monitoring with instant alerts for Google Web Risk list appearances.

Find out more

Web risk tool ease-of-use

A user-friendly dashboard that only needs your website's IP address or domain name to run a check.

Find out more

Key takeaways

  • This tool submits the URL, domain or IP address you enter to Google Web Risk and reports whether Google currently lists it as malware, phishing or unwanted software.
  • These are the same lists browsers consult before showing a red interstitial warning, so a listing here is what your visitors are about to see.
  • The lookup runs from HostTracker's own check network; the verdict comes from Google's lists and not from a network path.
  • It is free, needs no login and no credit card.
  • For continuous checks, see the web risk monitoring page, where the lists are rechecked every 12 hours.

Frequently asked questions.

Enter the URL, domain or IP address above and run the check. The tool looks the address up in Google Web Risk and either reports that no threats were detected or names each list that matched: MALWARE, SOCIAL_ENGINEERING (phishing and other deception) or UNWANTED_SOFTWARE. The lookup also covers the parent domains and folders of a URL, so a listing of the whole domain shows up even when you check a single page.
Three kinds of sites. Malware sites host or distribute software that harms the visitor's device. Social engineering sites trick people into revealing passwords or payment details, or into installing something, and include phishing pages that imitate a bank or a sign-in screen. Unwanted software sites push downloads that change browser settings or install without clear consent. This check queries all three lists plus Google's extended social engineering list, and shows a match on that list as SOCIAL_ENGINEERING.
Not necessarily. A clean result means Google does not currently list the address for malware, phishing or unwanted software. It does not tell you whether a shop delivers what it sells, whether the site was hacked an hour ago, or whether a brand-new phishing page has been found yet. Treat it as one signal among several: check how long the domain has existed with the whois lookup, and look at the address bar before you type a password.
Both draw on Google's lists of unsafe web resources and use the same threat categories. Google offers them through two APIs: Safe Browsing for non-commercial use and Web Risk, part of Google Cloud, for commercial products. HostTracker is a commercial service, so it uses Web Risk. Browsers such as Chrome use Safe Browsing to show their red warning pages, so a listing found here usually means visitors see that warning or are about to.
Most listings of legitimate sites follow a compromise: an outdated CMS or plugin, a stolen admin password, an infected file that injects redirects, or a phishing kit uploaded to a folder nobody looks at. A third-party script, an ad network or a user upload area can serve harmful content too. The Security issues report in Google Search Console names the problem and gives sample URLs, which tell you where to start looking.
Fix the cause first: remove the malware, phishing page or unwanted download, close the hole the attacker used and change every password. Then verify the site in Google Search Console if you have not already, open the Security issues report and select Request Review, describing what you fixed. Google says a review takes from a few days to a few weeks. Run this check again afterwards to confirm the listing has cleared. The web risk check guide covers the steps in more detail.
Yes. The tool accepts a full URL, a bare domain or an IP address. A bare domain is checked at its root together with its parent domains, which catches a listing of the whole site. Google can also list a single page or folder, and that kind of listing only shows up when you check a URL at or below that path, so if you suspect a particular page, check its full URL.
Not in full. HostTracker keeps a local copy of Google's Web Risk lists, which are stored as short hash prefixes rather than readable addresses, and compares hashes of your URL against it. Only when a prefix matches does it ask Google about that prefix to confirm the match, so a clean address is answered without Google ever receiving it. Google designed this way of using the lists so that its servers never learn the actual addresses being checked.
Set up web risk monitoring. It checks your site against Google's Web Risk lists every 12 hours and sends an alert when a listing appears, by email, SMS, voice call, Slack, Telegram and more. Catching a listing early matters, because browsers keep showing a warning to every visitor until you fix the problem and Google's review clears it.

Part of HostTracker's website monitoring software.