# Google Safe Browsing flags my website as deceptive and possible phising

**URL:** <https://forum.infinityfree.com/t/google-safe-browsing-flags-my-website-as-deceptive-and-possible-phising/121357>\
**Category:** Hosting Support\
**Created:** [October 15, 2026, 7:05pm UTC](https://forum.infinityfree.com/t/google-safe-browsing-flags-my-website-as-deceptive-and-possible-phising/121357 "2026-10-15T19:05:09Z")\
**Posts on this page:** 11\
**Page:** 1

<div class="post-metadata">

**Author:** ![whos\_eddie](https://forum.infinityfree.com/letter_avatar/whos_eddie/32/6_449c533f586939b6e5f246632a46421f.png) [@whos\_eddie](https://forum.infinityfree.com/u/whos_eddie)\
**Post date:** [October 15, 2026, 7:05pm UTC](https://forum.infinityfree.com/t/google-safe-browsing-flags-my-website-as-deceptive-and-possible-phising/121357/1 "2026-10-15T19:05:10Z")

</div>

### Website URL

[https://iccburuburufootballministry.infinityfreeapp.com](https://iccburuburufootballministry.infinityfreeapp.com)

### Error Message

Google Search Console reports two active security issues: “Deceptive pages” and “Possible Phishing Detected on User Login.” Both show “Sample URLs: N/A”. Chrome also displays a red “Dangerous site” warning when I try to access my website.

### Other Information

This is the official website for ICC BuruBuru Football Ministry. I have checked several PHP files, including the homepage, login page, and join form, and inspected some database records, but I have not found obvious malicious code. Google Safe Browsing’s site-status checker previously reported no unsafe content, but Chrome still displays a dangerous-site warning. I have already submitted a Safe Browsing report stating that the page is safe. Please help me investigate whether suspicious files or another hosting-related issue could be causing these warnings.

---

<div class="post-metadata">

**Author:** ![Lemni](https://forum.infinityfree.com/user_avatar/forum.infinityfree.com/lemni/32/68303_2.png) [@Lemni](https://forum.infinityfree.com/u/Lemni)\
**Post date:** [October 15, 2026, 7:05pm UTC](https://forum.infinityfree.com/t/google-safe-browsing-flags-my-website-as-deceptive-and-possible-phising/121357/2 "2026-10-15T19:05:25Z")

</div>

_Beep boop, I’m a bot! I dug through the forum to get you started. I sometimes get things wrong though, so do with this what you will until a human has a look._

Google’s automated scanners decide this flag, not anything in the hosting itself, and the fix goes through Google. The knowledge base article below explains it. These warnings come from bots that look for phishing or malware patterns. The article says they sometimes flag safe sites by mistake, and that the exact reason can be hard to pin down.

The article’s recommended route is Search Console’s own review process, not just a Safe Browsing report:

> [@Why Do I See a "Deceptive Site Ahead" Warning on My Website?](https://forum.infinityfree.com/docs?topic=99495):
>
> If you’re trying to access your website and encounter a bright red warning page that looks something like this: Deceptive site ahead Firefox blocked this page because it may trick you into doing something dangerous like installing software or revealing personal information such as passwords or credit cards. Advisory provided by [Google Safe Browsing](https://developers.google.com/safe-browsing/v4/advisory). Don’t worry - you’re not alone. This article will explain what this warning means, why it appears, and what steps you can take to fix it. What…

Open the Security Issues section for your verified site and request a review there, once you’re confident nothing on the site could look deceptive. Google then checks the site manually and lifts the block if it’s clean. You’ve already sent a Safe Browsing report, so have you also requested a review in Search Console?

I also found a few other recent topics with the same “Deceptive pages, Sample URLs N/A” symptom. I can’t say yet that yours has the same cause, because none of them show a confirmed one.

The article lists “unsecured forms” and “vulnerable scripts” among the things that can trigger a flag. Your site has a login page and a join form, and your account is only a little over a week old. So it would help to know what the login page asks visitors for. Is it a login for your own site’s members only, or does it look like, or ask for, credentials for something else, such as a Google sign-in?

---

<div class="post-metadata">

**Author:** ![whos\_eddie](https://forum.infinityfree.com/letter_avatar/whos_eddie/32/6_449c533f586939b6e5f246632a46421f.png) [@whos\_eddie](https://forum.infinityfree.com/u/whos_eddie)\
**Post date:** [October 15, 2026, 7:10pm UTC](https://forum.infinityfree.com/t/google-safe-browsing-flags-my-website-as-deceptive-and-possible-phising/121357/3 "2026-10-15T19:10:03Z")

</div>

Thank you for your response. My login page only asks users for a username and password for their own accounts on the ICC BuruBuru Football Ministry website. It does not ask for Google, Gmail, or other external account credentials. The website has a login page for members and players, as well as a join form for new members. I am still trying to identify the cause of the security warnings and would appreciate your guidance.

---

<div class="post-metadata">

**Author:** ![whos\_eddie](https://forum.infinityfree.com/letter_avatar/whos_eddie/32/6_449c533f586939b6e5f246632a46421f.png) [@whos\_eddie](https://forum.infinityfree.com/u/whos_eddie)\
**Post date:** [October 15, 2026, 7:15pm UTC](https://forum.infinityfree.com/t/google-safe-browsing-flags-my-website-as-deceptive-and-possible-phising/121357/4 "2026-10-15T19:15:48Z")

</div>

Thank you for your response. My login page only asks users for a username and password for their own accounts on the ICC BuruBuru Football Ministry website. It does not ask for Google, Gmail, or other external account credentials. The website also has a join form for new members. I am still investigating the security warnings and would appreciate your guidance.

---

<div class="post-metadata">

**Author:** ![dan3008](https://forum.infinityfree.com/user_avatar/forum.infinityfree.com/dan3008/32/68577_2.png) [@dan3008](https://forum.infinityfree.com/u/dan3008)\
**Post date:** [October 15, 2026, 7:49pm UTC](https://forum.infinityfree.com/t/google-safe-browsing-flags-my-website-as-deceptive-and-possible-phising/121357/5 "2026-10-15T19:49:36Z")

</div>

Google sage search doesn’t know that though, and from experience it really doesn’t like sites without at least a landing page

---

<div class="post-metadata">

**Author:** ![whos\_eddie](https://forum.infinityfree.com/letter_avatar/whos_eddie/32/6_449c533f586939b6e5f246632a46421f.png) [@whos\_eddie](https://forum.infinityfree.com/u/whos_eddie)\
**Post date:** [October 16, 2026, 8:57pm UTC](https://forum.infinityfree.com/t/google-safe-browsing-flags-my-website-as-deceptive-and-possible-phising/121357/6 "2026-10-16T20:57:31Z")

</div>

Thank you for the advice. My website does have a public welcome page that visitors see first. It does not automatically redirect visitors to the login page. However, the welcome page currently has no visible login button, so I use a separate direct link to access the login page. Chrome still displays the “Dangerous site” warning. Would you recommend adding a visible login button to the welcome page, and could the absence of that button be contributing to the warning?

---

<div class="post-metadata">

**Author:** ![dan3008](https://forum.infinityfree.com/user_avatar/forum.infinityfree.com/dan3008/32/68577_2.png) [@dan3008](https://forum.infinityfree.com/u/dan3008)\
**Post date:** [October 16, 2026, 9:51pm UTC](https://forum.infinityfree.com/t/google-safe-browsing-flags-my-website-as-deceptive-and-possible-phising/121357/7 "2026-10-16T21:51:42Z")

</div>

You shouldn’t need a visible login button.

I’d suggest logging into (or registering with) the google search console, and seeing what problems its got, and maybe requesting a review

---

<div class="post-metadata">

**Author:** ![whos\_eddie](https://forum.infinityfree.com/letter_avatar/whos_eddie/32/6_449c533f586939b6e5f246632a46421f.png) [@whos\_eddie](https://forum.infinityfree.com/u/whos_eddie)\
**Post date:** [October 16, 2026, 9:55pm UTC](https://forum.infinityfree.com/t/google-safe-browsing-flags-my-website-as-deceptive-and-possible-phising/121357/8 "2026-10-16T21:55:23Z")

</div>

Hello, my website is still showing Chrome’s red “Dangerous site” warning.

Google Search Console reports two active security issues:

- Deceptive pages, with my homepage and the homepage URL ending in “?i=1” listed as sample URLs.
- Possible Phishing Detected on User Login, with no sample URLs provided.

I have checked several PHP files and database entries but haven’t found obvious malicious code. Could you please help investigate whether any files, scripts, redirects, or server-level content on my account may be triggering these warnings?

Website: [https://iccburuburufootballministry.infinityfreeapp.com/](https://iccburuburufootballministry.infinityfreeapp.com/)

Thank you.

---

<div class="post-metadata">

**Author:** ![whos\_eddie](https://forum.infinityfree.com/letter_avatar/whos_eddie/32/6_449c533f586939b6e5f246632a46421f.png) [@whos\_eddie](https://forum.infinityfree.com/u/whos_eddie)\
**Post date:** [October 16, 2026, 10:01pm UTC](https://forum.infinityfree.com/t/google-safe-browsing-flags-my-website-as-deceptive-and-possible-phising/121357/9 "2026-10-16T22:01:36Z")

</div>

Thank you. Google Search Console has now provided the detailed security message. It specifically says it detected social engineering content on my homepage and the homepage URL ending in “?i=1”. The separate login warning still has no sample URLs.

Could you please confirm whether InfinityFree’s browser-verification mechanism or any injected hosting scripts could be contributing to this detection? I want to make sure the site is clean before requesting Google’s security review.

Thank you.

---

<div class="post-metadata">

**Author:** ![dan3008](https://forum.infinityfree.com/user_avatar/forum.infinityfree.com/dan3008/32/68577_2.png) [@dan3008](https://forum.infinityfree.com/u/dan3008)\
**Post date:** [October 17, 2026, 8:36am UTC](https://forum.infinityfree.com/t/google-safe-browsing-flags-my-website-as-deceptive-and-possible-phising/121357/10 "2026-10-17T08:36:48Z")

</div>

> [@whos\_eddie](#):
>
> Could you please confirm whether InfinityFree’s browser-verification mechanism or any injected hosting scripts could be contributing to this detection?

Since I don’t work for InfinityFree, [IFastNet](https://www.infinityfree.com/go/ifastnet) or Google, I can’t. However, I think it’s unlikely otherwise every site hosted here would have the same problem.

---

<div class="post-metadata">

**Author:** ![system](https://infinityfree-forum-uploads.s3.dualstack.eu-central-1.amazonaws.com/original/3X/b/0/b024fd3fa88bae093c9576e55c2c94e33f890206.svg) [@system](https://forum.infinityfree.com/u/system)\
**Post date:** [October 24, 2026, 8:37am UTC](https://forum.infinityfree.com/t/google-safe-browsing-flags-my-website-as-deceptive-and-possible-phising/121357/11 "2026-10-24T08:37:33Z")

</div>

Closed on October 24, 2026, 8:37am UTC

This topic was automatically closed 7 days after the last reply. New replies are no longer allowed.
