Follow-up Request: Investigation of Google Safe Browsing Deceptive Pages Warning

Hosting Support
1

Website URL

https://ayiehsdesign.infinityfreeapp.com/

Error Message

Hello InfinityFree Support Team,

Thank you for your previous response.

I would like to follow up regarding the Google Safe Browsing warning affecting my website:

Website: https://ayiehsdesign.infinityfreeapp.com/

Google Search Console continues to report one security issue classified as Deceptive pages. Google Safe Browsing also identifies the website as unsafe, warning that it may contain harmful content that attempts to trick visitors into sharing personal information or downloading software.

I have conducted several checks on my website:

Reviewed the homepage HTML and the HTML returned by /?i=1. Both display the expected website content.

Checked for suspicious scripts, redirects, hidden forms, and unexpected download links. No obvious malicious code was found.

Reviewed the PHP files in the admin folder.

Reviewed the includes folder, including the PHPMailer components, header.php, and footer.php.

Checked the img folder, which contains only image files.

Reviewed the private folder and its .htaccess protection.

Reviewed both .htaccess files, inside and outside htdocs. They contain the expected InfinityFree-managed settings.

Used Google Search Console’s Live URL Inspection for both the homepage and /?i=1. Both URLs are available to Google and can be indexed.

Despite these checks, Google Safe Browsing continues to flag the website.

Could you please help investigate the hosting account and server-side environment for possible security issues?

In particular, I would appreciate it if you could check:

Possible malicious file injections or unauthorized modifications.

Suspicious PHP files or server-side code that may not appear in the rendered HTML.

Unexpected redirects or conditional content served to certain visitors or crawlers.

Any suspicious activity or security incidents associated with my hosting account.

Whether there are any hosting-level issues that could be contributing to this Safe Browsing classification.

I understand that Google controls its own Safe Browsing classification, but I would appreciate your assistance in determining whether there is anything suspicious at the hosting level.

Other Information

N/A

2

Here’s a short summary of this post, so people can quickly see what it’s about. Please keep posts short and to the point: describe the problem and include the exact error message and your website address. That helps people help you more quickly.

  • Google Safe Browsing keeps flagging my site https://ayiehsdesign.infinityfreeapp.com/ as “Deceptive pages” and unsafe, even though Search Console Live URL Inspection shows both the homepage and /?i=1 as available to Google.
  • I found no malicious code checking the homepage and /?i=1 HTML, the admin and includes PHP files (incl. PHPMailer, header.php, footer.php), the img folder, the private folder with .htaccess protection, and both .htaccess files (expected InfinityFree settings).
  • Please investigate my hosting account and server-side environment for malicious file injections, suspicious server-side PHP not visible in rendered HTML, unexpected redirects or conditional content, account security incidents, or hosting-level issues behind this flag.
3

Beep boop, I’m a bot! I dug through the forum to get you started. I sometimes get things wrong though, so do with this what you will until a human has a look.

The hosting side can’t settle this one. Our article on this warning says only Google can remove a Safe Browsing listing, and that we don’t know why Google flagged a site, because Google doesn’t share its reasons with us. The Security Issues report in your Search Console is the only place that detail shows up.

Your checks cover the “site was hacked” cause well. The article lists other common causes that a code review won’t show:

  • a copy of another site’s login page
  • another brand’s name or logo
  • running a site for someone else without saying so
  • third-party content embedded in your pages

It also says that when you can’t find anything wrong, you should request a review anyway. In the request, explain what the site is, who runs it and what any login forms are for.

Here’s the article:

Two questions would help me narrow it down. Have you already clicked Request review in the Security Issues report, and if so, what did Google answer? And what is the site for? Does it have a login or admin form, or use a name or logo that resembles another company’s?

4

Hello InfinityFree Support Team,

Thank you for your assistance.

I checked my Google Search Console again, and the Security Issues report still shows the following issue:

Deceptive pages

Google lists these two sample URLs:

I previously submitted a review request, but the Deceptive pages issue is still appearing in my Security Issues report.

Regarding my website, Ayieh’s Design is my personal web design portfolio. It showcases my projects and allows potential clients to submit inquiries through a contact form.

It also has a private administrator login page and dashboard, which I personally use to manage customer inquiries. This login is exclusively for my own website administration.

My website uses its own branding, including the Ayieh’s Design name and logo. It is not intended to imitate another company’s website or login page.

I have reviewed my website files and components but have not found any obvious malicious or deceptive code.

Could you please advise whether there are any additional checks I should perform, particularly regarding third-party resources or other possible causes of this warning?

Thank you again for your assistance.