Google flags hakbangph.kesug.com as deceptive

Hosting Support
1

Website URL

https://hakbangph.kesug.com/

Error Message

Google Search Console flags hakbangph.kesug.com for “Deceptive pages”.

Other Information

Google Search Console reports “Deceptive pages” and lists:

  • /challenge.php?id=1
  • /join-challenge.php
  • /login.php
  • /login.php?i=1

A static review of our exported source files found no injected phishing forms or external password destinations.

2

Welcome to the InfinityFree community forum! Good to have you here.

  • Most people answering here are volunteers. They’re often the fastest source of help. Admin (the only staff member) checks in about once a day for issues on our end.
  • Volunteers can’t see your account or website. Share what you actually see, like error messages and what happens when you try something. That’s more useful than your theory of what’s wrong.
  • AI tools often get InfinityFree wrong. If a volunteer’s advice differs from what an AI told you, please try the volunteer’s suggestion first.
  • Solving an issue is a joint effort. Try the suggestions you get and report back what happened.
3

Beep boop, I’m a bot! I dug through the forum to get you started. I sometimes get things wrong though, so do with this what you will until a human has a look.

I think this is the Google Safe Browsing listing covered in our article on the “Deceptive site ahead” warning. Only Google can remove the listing, and only after you request a review:

The article says these listings are automated and judge what a site looks like, not what it’s meant to do. Your flagged URLs are all login or join pages. The article lists two likely causes: a hacked site, or a legitimate site that looks like phishing. A site looks like phishing when visitors mostly see a login form with little explaining who runs it, and new sites are judged more strictly. Your hosting account is only a couple of weeks old, so that could apply here.

To check for a hack, the article suggests looking through your account’s files for anything you don’t recognize. It also suggests reinstalling any software from a clean copy and changing your passwords. Your exported source being clean is a good sign, but the files actually on the server are what count. So compare them with your export. I don’t have a source that says how to check what the server returns beyond that.

If everything on the server matches your export, the cause is probably a false positive. The article’s advice for that case is:

  • Put a public homepage in front of the login that explains what Hakbang PH is.
  • Add an about page and contact details.
  • Add a privacy policy, since you collect user data.
  • Use only your own branding.

Then request a review once, and not before everything is fixed. In the review request, explain what the app is and what the login is for. Repeated rejected requests can block you from requesting reviews for a while.

Does a logged-out visitor to the homepage see public content, or do they land straight on a login form? That would help show whether the false-positive explanation fits.

4

Please take up the issue with Google Safe Browsing

5

Why Do I See a "Deceptive Site Ahead" Warning on My Website?

This might help