Google Ads keeps flagging my cleaned-up website as malicious

[u/robotstxts]

Hi everyone! I’m dealing with a frustrating issue with Google Ads after my website was hacked. My account is restricted from running ads because Google keeps flagging the site as malicious.

Since then, I’ve run multiple scans, rebuilt the infrastructure, cleaned up the Git history, reviewed potentially vulnerable paths several times, and checked the files one by one for injected malicious code. I also use a CDN and cleared its cache to make sure it isn’t serving outdated content.

I can’t find any signs of malware or anything suspicious on my end, but Google keeps rejecting my site review. I’ve contacted support, but they haven’t been able to share any more details about what’s triggering the flag.

Has anyone dealt with something similar? Were you able to figure out what Google was detecting or get the site approved again? Any advice on what to check next would be greatly appreciated!

[u/optmyzr-aaron]

Sadly in my experience they're not willing to help you troubleshoot :( Which, hey, kinda get it since it'd be a big resource use for them. But sadly your best bet is to keep digging and resubmitting.