Fixing a blocklisted domain

A listing usually means one of a few things:

• Your site was compromised and served malware or phishing (often through an outdated plugin or theme).
• Your server IP was used to send spam, sometimes by another site on shared hosting.
• A form or comment section was abused to send spam.

Check Google Search Console (Security Issues) for specifics if your site is flagged by Safe Browsing, and scan your site for malware.

Removal requests are rejected if the problem is still there, so fix the root cause before requesting delisting:

• Update your CMS, plugins and themes; remove anything unused.
• Remove injected or unknown files and change all passwords (hosting, CMS admin, FTP, database).
• If you are on shared hosting and the issue is the server IP, contact your host, they may need to act or move you.
• Add spam protection (CAPTCHA/anti-spam) to any public forms.

• Google Safe Browsing: in Search Console, once cleaned, use Security Issues, "Request a review".
• Spam/abuse blocklists: most list a removal or delisting form on their site; search for the blocklist name plus "removal".

After the listing clears, your next TrustedOrigin scan will update your Spam Free certification. Keep your software patched to avoid a repeat.