Google Search Console reports two active security issues: “Deceptive pages” and “Possible Phishing Detected on User Login.” Both show “Sample URLs: N/A”. Chrome also displays a red “Dangerous site” warning when I try to access my website.
Other Information
This is the official website for ICC BuruBuru Football Ministry. I have checked several PHP files, including the homepage, login page, and join form, and inspected some database records, but I have not found obvious malicious code. Google Safe Browsing’s site-status checker previously reported no unsafe content, but Chrome still displays a dangerous-site warning. I have already submitted a Safe Browsing report stating that the page is safe. Please help me investigate whether suspicious files or another hosting-related issue could be causing these warnings.
Beep boop, I’m a bot! I dug through the forum to get you started. I sometimes get things wrong though, so do with this what you will until a human has a look.
Google’s automated scanners decide this flag, not anything in the hosting itself, and the fix goes through Google. The knowledge base article below explains it. These warnings come from bots that look for phishing or malware patterns. The article says they sometimes flag safe sites by mistake, and that the exact reason can be hard to pin down.
The article’s recommended route is Search Console’s own review process, not just a Safe Browsing report:
Open the Security Issues section for your verified site and request a review there, once you’re confident nothing on the site could look deceptive. Google then checks the site manually and lifts the block if it’s clean. You’ve already sent a Safe Browsing report, so have you also requested a review in Search Console?
I also found a few other recent topics with the same “Deceptive pages, Sample URLs N/A” symptom. I can’t say yet that yours has the same cause, because none of them show a confirmed one.
The article lists “unsecured forms” and “vulnerable scripts” among the things that can trigger a flag. Your site has a login page and a join form, and your account is only a little over a week old. So it would help to know what the login page asks visitors for. Is it a login for your own site’s members only, or does it look like, or ask for, credentials for something else, such as a Google sign-in?
Thank you for your response. My login page only asks users for a username and password for their own accounts on the ICC BuruBuru Football Ministry website. It does not ask for Google, Gmail, or other external account credentials. The website has a login page for members and players, as well as a join form for new members. I am still trying to identify the cause of the security warnings and would appreciate your guidance.
Thank you for your response. My login page only asks users for a username and password for their own accounts on the ICC BuruBuru Football Ministry website. It does not ask for Google, Gmail, or other external account credentials. The website also has a join form for new members. I am still investigating the security warnings and would appreciate your guidance.
Thank you for the advice. My website does have a public welcome page that visitors see first. It does not automatically redirect visitors to the login page. However, the welcome page currently has no visible login button, so I use a separate direct link to access the login page. Chrome still displays the “Dangerous site” warning. Would you recommend adding a visible login button to the welcome page, and could the absence of that button be contributing to the warning?
Hello, my website is still showing Chrome’s red “Dangerous site” warning.
Google Search Console reports two active security issues:
Deceptive pages, with my homepage and the homepage URL ending in “?i=1” listed as sample URLs.
Possible Phishing Detected on User Login, with no sample URLs provided.
I have checked several PHP files and database entries but haven’t found obvious malicious code. Could you please help investigate whether any files, scripts, redirects, or server-level content on my account may be triggering these warnings?
Thank you. Google Search Console has now provided the detailed security message. It specifically says it detected social engineering content on my homepage and the homepage URL ending in “?i=1”. The separate login warning still has no sample URLs.
Could you please confirm whether InfinityFree’s browser-verification mechanism or any injected hosting scripts could be contributing to this detection? I want to make sure the site is clean before requesting Google’s security review.
Since I don’t work for InfinityFree, IFastNet or Google, I can’t. However, I think it’s unlikely otherwise every site hosted here would have the same problem.