I recently published my party decoration website on InfinityFree.
Google Safe Browsing has flagged my website as potentially deceptive. My hosting account is active, and I have reviewed my website files without finding any obvious malicious code.
Could this be related to the free rf.gd subdomain or the hosting environment?
Could you please help me identify the cause and suggest how to resolve it?
Welcome to the InfinityFree community forum! Good to have you here.
Most people answering here are volunteers. They’re often the fastest source of help. Admin (the only staff member) checks in about once a day for issues on our end.
Volunteers can’t see your account or website. Share what you actually see, like error messages and what happens when you try something. That’s more useful than your theory of what’s wrong.
AI tools often get InfinityFree wrong. If a volunteer’s advice differs from what an AI told you, please try the volunteer’s suggestion first.
Solving an issue is a joint effort. Try the suggestions you get and report back what happened.
Beep boop, I’m a bot! I dug through the forum to get you started. I sometimes get things wrong though, so do with this what you will until a human has a look.
Only Google can remove this warning, and it goes through a review request in Search Console. The rf.gd subdomain and the hosting aren’t the cause. Our article says Safe Browsing listings come from Google’s automated scanners, which judge what a site looks like, and InfinityFree can’t remove them.
The article lists the usual reasons for a “Deceptive” listing:
The site contains a copy of another site’s login page.
It uses another brand’s name or logo.
It was hacked, so files you didn’t upload are on the account.
It’s a false positive. This happens most often with new sites that have little history, and yours was only set up a day or two ago.
Here’s what I’d do:
Enter your address in the Google Transparency Report to see what Google lists. Then open Security & Manual Actions > Security Issues in Search Console.
Look for files on the account you don’t recognise. Check the whole site, not only the pages Search Console lists. Also look for names, logos or templates that resemble a well-known company’s, and for any login form.
Make clear who runs the site and what it is. Add a public homepage with real content, plus an about page and contact details.
Once that’s done, tick I have fixed these issues and click Request review. Do this only once, because repeated reviews of sites that aren’t fixed can block you from requesting more.
The full steps are in this article:
The article also covers the report form for Chrome and Edge, if you can’t use Search Console.
Does your site have a login form, a contact form, or any page that uses someone else’s brand name or images, such as a template, a payment logo or a social media button? That would help narrow down what Google’s scanner reacted to.