Safe Browsing Checker: Free URL Safety Test

A safe browsing checker tells you whether Google's Safe Browsing lists a web address as dangerous. Enter a URL and the tool reports whether it is flagged for malware, phishing, unwanted software or harmful apps. Site owners, SEOs and cautious visitors use it to catch warnings before they cost traffic or trust.

What Is Google Safe Browsing?

Google Safe Browsing is a list of web addresses that Google has identified as unsafe, and it is used to warn people before they open a risky page. Chrome and other browsers use it to show a full-page red warning, and Google Search can attach warnings to flagged results.

The list covers several threat categories, and this tool shows the four most common ones:

• Malware: pages that try to install harmful software or run malicious code on a visitor's device.
• Social Engineering (Phishing): pages that imitate a trusted brand or service to steal passwords, card numbers or other personal data.
• Unwanted Software: downloads that behave in deceptive or harmful ways, such as changing browser settings without clear consent.
• Potentially Harmful App: apps or app-related pages that Google considers risky for users.

A site usually lands on the list because it was hacked, because it hosts a malicious file, or because someone built it to deceive visitors. Many owners never notice until traffic collapses or a customer sends a screenshot of the warning.

How to Use the Safe Browsing Checker

You only need one web address to run a safe browsing test, and the result appears on the next screen. Follow these steps:

1. Open the page and find the field labeled Enter Website URL.
2. Type or paste the address you want to test, for example https://example.com. The placeholder in the field shows the expected format.
3. If you leave off the protocol, the tool assumes http:// and checks that version. Paste the full https:// address when you want to test the secure version exactly.
4. Press the button under the field to submit the check.
5. Read the headline verdict first: No listed threats found, Warning: Threat Detected or Unable to Check.
6. Scroll to Security Check Details to see the status of each of the four threat types, plus the exact URL that was checked and a UTC time stamp.

Only web addresses starting with http or https are accepted. An address that begins with another protocol, such as ftp://, is rejected, and an empty field returns an error asking for a valid URL.

Worked Example: Testing a Page After a Traffic Drop

Imagine you run an online shop and organic visits fall sharply over a weekend. A customer emails that their browser showed a red warning. You enter shop.example.com/blog/summer-sale in the field. The tool adds the protocol and checks http://shop.example.com/blog/summer-sale.

Suppose the result reads Warning: Threat Detected. The message says Google lists the URL for MALWARE. In the details, Malware shows as Detected, while Phishing, Unwanted Software and Potentially Harmful App show as Not listed.

That tells you what to look for. A hacked plugin or an injected script on that page is the likely cause, not a phishing kit. You would scan the files, remove the injected code, update the software, and then request a review in Google Search Console. After the fix, run the same URL again to see whether the listing has cleared.

How Do You Read the Results?

The tool gives one of three outcomes, and each one needs a different response. The table summarizes them.

When you see no listed threats

This is the result you want. The message states that no listed threats were returned at the time checked, and it also says this is not a guarantee of safety. A brand-new infection may not be listed yet, so treat a clean result as one data point, not a full security audit.

When a threat is detected

Look at which row says Detected. Malware points to injected code or infected files. Social Engineering points to a phishing page or a deceptive form, often planted on a hacked site. Unwanted Software and Potentially Harmful App usually point to a download or app link that needs to be removed or replaced.

When the check is unverified

Unable to Check means the tool could not get a verdict. It does not mean your site is safe or unsafe. Confirm the address is typed correctly, then run it again after a few minutes.

Is Safe Browsing in Chrome the Same Thing?

No. The Safe Browsing setting in Chrome is a protection you switch on for yourself, while this tool checks whether a specific URL is on Google's list. In Chrome, you can find the setting under Settings, then Privacy and security, then Security, where the choices include Enhanced protection, Standard protection and No protection.

If you are searching for "safe browsing off" or "safe browsing settings", that is a browser configuration question, and this page will not change it. If you want to know whether a site is flagged, this page is the right place. Safe Search is a third thing: it filters explicit results in Google Search and has nothing to do with malware or phishing listings.

Who Should Use a Safe Browsing Test?

Anyone who publishes, buys or visits web pages can get value from a quick check. These are the most common situations:

• Site owners after a hack scare: confirm whether Google has flagged the homepage or a specific page.
• SEOs diagnosing a sudden drop: rule a security flag in or out before spending hours on content and links.
• Agencies onboarding a client: test the client's main URLs before you start work, so you know the starting condition.
• Buyers of domains or links: check a domain before you purchase it or place a link on it.
• Everyday users: test a suspicious link from an email or text message before opening it.

For wider reputation checks, pair this with the blacklist checker, which looks at spam databases for domains and IPs. For a full overview of related utilities, browse the Security & Encryption Tools hub.

Best Practices and Troubleshooting Tips

Good checking habits catch problems early and prevent false conclusions. Use these tips:

• Test the exact URL that matters. The tool reports on the address you enter. Check your homepage, your top landing pages and any page you recently edited, not just one.
• Test both versions after a migration. If you moved from http to https, enter the full https:// address, since a bare domain is checked as http.
• Run the check on a schedule. A weekly check for important sites is a sensible routine, with an extra check whenever traffic drops without explanation or a visitor reports a warning.
• Confirm the page loads. A page returning errors can hide other problems. Use the bulk HTTP status checker to verify that your key URLs respond correctly.
• Fix the cause, not just the symptom. Removing the visible bad file while leaving the backdoor means the flag returns. Change passwords, update plugins and themes, and delete unknown admin accounts.
• Use Search Console for the official review. Google's Search Central documentation describes the Security Issues report and the review request process for owners of verified sites.

Common input mistakes

Typos in the domain are the most frequent cause of confusing results. Spaces, a missing dot, or a pasted address that includes extra text can lead to an error or a check of the wrong address. Copy the URL straight from the browser address bar when possible.

Protect against repeat infections

After you clean a site, tighten how the browser loads resources. A Content Security Policy generator helps you build headers that limit which scripts can run. If you also want to confirm that your encryption is healthy, the certificate decoder shows issuer and expiration details for an SSL certificate.

What Does This Check Not Cover?

The result reflects Google's list at the moment you check, so it has clear limits. A clean verdict does not prove a site is secure, because new or targeted attacks may not be listed yet. It also does not look inside your server, review your plugins or scan files for hidden code.

The check also covers listing status only. It does not measure page speed, SSL validity, spam reputation or ranking strength. For ongoing performance and technical reviews, the Website Audit & Performance hub gathers the related tools in one place.

Finally, a listing can be tied to a specific URL, so one page can be flagged while another on the same domain is not. If the headline looks clean but users still report warnings, check the exact pages they visited.

Run the safe browsing test above whenever you publish, migrate or notice odd traffic changes. Enter a URL, read the four threat rows, and you will know within seconds whether Google is flagging your page and what to fix first.