I'm a programmer and I have a website that allows users to upload their own HTML website to it. The user will zip his folder and in one click he can upload it to my website and it will be showing up as a subdomain. I don't allow PHP and some other extensions, only HTML and some stuff.

The problem that I have now is that some bad users are uploading HTML files with  social engineering content, such as faked Facebook and PayPal login pages. Google always send me a notification about those harmful links and ask me to remove the content.

As a programmer the only solution that I have is checking the files myself  manually, but that is to time consuming. Does anyone have a solution for this problem?