Google Chrome Safe Browsing displays a red “Dangerous site” warning and identifies my website as a phishing site. Google Search Console reports “Deceptive pages”, but the example URL is shown as “T/A”.
I have reviewed several PHP and JavaScript files and the .htaccess file, but have not found obvious suspicious code. I have also changed my database password and reported the suspected false positive to Google.
Could you please help me investigate whether my website has compromised files or another hosting-related security issue?
Other Information
The issue is still active in Google Search Console. The example URL is shown as “T/A”. I have checked my .htaccess file and reviewed parts of my PHP and JavaScript files, but I have not identified the cause. I have also submitted a report to Google Safe Browsing. I would appreciate guidance on further security checks.
Welcome to the InfinityFree community forum! Good to have you here.
Most people answering here are volunteers. They’re often the fastest source of help. Admin (the only staff member) checks in about once a day for issues on our end.
Volunteers can’t see your account or website. Share what you actually see, like error messages and what happens when you try something. That’s more useful than your theory of what’s wrong.
AI tools often get InfinityFree wrong. If a volunteer’s advice differs from what an AI told you, please try the volunteer’s suggestion first.
Solving an issue is a joint effort. Try the suggestions you get and report back what happened.
Beep boop, I’m a bot! I dug through the forum to get you started. I sometimes get things wrong though, so do with this what you will until a human has a look.
We can’t remove this warning, because only Google can remove a Safe Browsing listing. It also doesn’t come from InfinityFree’s servers. Google’s scanners judge what a site looks like, and the article below explains how that works and how to get a review.
This article covers the warning, the common causes and the review process:
A “T/A” example URL doesn’t mean nothing is wrong. The article says the examples are only a sample, so it doesn’t narrow down which pages Google flagged. It lists these likely causes:
A copy of another site’s login page, or another brand’s name or logo.
A hacked site, for example through outdated software.
A false positive. This mostly hits sites where the first thing a visitor sees is a login form, and new sites with little history are judged more strictly.
Your hosting account is about a month old, so the false positive is plausible. But I can’t tell from here which of these applies to you.
What does a visitor see when they open https://absensipklulbi.wuaze.com/? Is it a login form straight away, or a page that explains what the site is? And does the site use any name, logo or design from another organisation or service?
If it’s a login form first, the article suggests adding a public homepage. It should say what the site is for and who runs it, with contact details. After that, request a review once in Search Console’s Security Issues report, and explain what the site and its login are used for. Your report through the Safe Browsing form is already sent, so don’t submit a new one while it’s pending.
If you find files you didn’t upload, the article’s advice is to remove them. It also says to update your software and change your hosting account and admin passwords.
When I open https://absensipklulbi.wuaze.com/ in Chrome, I immediately see the red “Dangerous site” warning from Google Safe Browsing. I cannot see the actual attendance page without proceeding past the warning, and I have not bypassed it.
The website is intended to be a student internship attendance system for ULBI. It is not intended to imitate another organisation’s login page or collect unrelated personal information.
Could you advise how I can check whether this is a false positive or whether further investigation is needed?
There is not much we can do to help you with this.
Google Safe Browsing says that your website is deceptive. Which means that either your website is deceptive or that Google is wrong. But we didn’t create your website so we don’t know if it is deceptive, and we’re not Google so we didn’t flag your website.
So this is something you’ll have to figure it our yourself. If you have checked your site and weren’t able to find anything that could be considered deceptive, then you should request a review from Google, not from us.