New domain reputation checklist
Brand-new domains are often blocked by browser & corporate security tools for the first few days until reputation services categorize them. This is not a code or DNS problem. Work through the list below.
1. Expected wait time
- Microsoft SmartScreen / Defender: 24–72 hours typical, up to 7 days.
- Google Safe Browsing: 24–48 hours after first crawl.
- Corporate Defender for Endpoint / Zscaler / Netskope: depends on admin policy refresh, often 1–3 days.
2. Submit for review
- Microsoft SmartScreen: microsoft.com/wdsi/filesubmission — choose "I believe this URL has been incorrectly classified."
- Google Safe Browsing: safebrowsing.google.com/report_error
- Norton Safe Web: safeweb.norton.com
- WebAdvisor / McAfee: sitelookup.mcafee.com
3. Verify it isn't actually broken
- Open the domain on a personal device / mobile data — if it loads, the block is client-side policy, not the site.
- Check HTTPS is live (Lovable auto-provisions; can take up to 72h).
- Confirm DNS A records point to
185.158.133.1for both apex andwww. - Make sure the domain isn't on a public blocklist: VirusTotal, URLhaus.
4. If a corporate machine is blocking it
- Ask the IT/security admin to allowlist the domain in Microsoft Defender → Indicators → URLs/Domains.
- Same for Zscaler, Netskope, Cisco Umbrella, or any SWG in use.
- No app-side change will bypass an enterprise policy block.
5. Build long-term reputation
- Keep the domain WHOIS public and accurate (registrar privacy is fine, but avoid mismatched data).
- Publish SPF, DKIM, DMARC even if you don't send mail — reduces spoofing risk score.
- Link the domain from established profiles (GitHub, LinkedIn) so crawlers can build trust signals.
- Don't change A records repeatedly — frequent changes look like fast-flux to scanners.
Most "this content is blocked" red screens clear themselves within 72 hours once a review is submitted.