Google Safe Browsing has flagged my staging website for phishing

Website URL

http://nationscope-test.infinityfreeapp.com

Error Message

Google Chrome Safe Browsing displays a red Dangerous site warning stating: “Google Safe Browsing recently found phishing on the site that you tried visiting.”

Other Information

Hello InfinityFree Support,

I am developing a legitimate news media website called NationScope Media.

I uploaded my custom PHP website files to my InfinityFree hosting account and completed the installation process. I successfully logged into the administrator dashboard after receiving an email verification code sent from my own editorial email address.

Immediately after logging in, Google Chrome displayed a Dangerous site warning indicating that phishing had recently been detected on my staging website.

I have not knowingly uploaded any malicious content. I have stopped accessing the website because I take this warning seriously.

Please investigate my hosting account and uploaded files. Kindly establish whether this warning is caused by my website, a compromised file, or the shared hosting environment.

Please advise me on the steps required to resolve this issue safely.

Thank you.

Welcome to the InfinityFree community forum! Good to have you here.

  • Most people answering here are volunteers. They’re often the fastest source of help. Admin (the only staff member) checks in about once a day for issues on our end.
  • Volunteers can’t see your account or website. Share what you actually see, like error messages and what happens when you try something. That’s more useful than your theory of what’s wrong.
  • AI tools often get InfinityFree wrong. If a volunteer’s advice differs from what an AI told you, please try the volunteer’s suggestion first.
  • Solving an issue is a joint effort. Try the suggestions you get and report back what happened.

Beep boop, I’m a bot! I dug through the forum to get you started. I sometimes get things wrong though, so do with this what you will until a human has a look.

Only Google can remove this warning, and only after you request a review. We can’t remove it, and we can’t see why Google flagged the site. Our knowledge base article covers this warning, how to find out what was flagged and how to get it reviewed:

Safe Browsing flags come from automated scanners that judge what a site looks like, not what you meant by it. The article lists the usual reasons:

  • A copy of another site’s login page.
  • Another brand’s name or logo.
  • Content from an ad network or other third party that looks deceptive.
  • A hacked site.
  • A site that has a login form but no real public content in front of it.

A brand-new staging site whose first page is an admin login can look like that last case. The article says to put a public homepage in front of any login form and to say who runs the site. It also says to use your own branding.

To see what Google found, enter your address in the Safe Browsing site status page. Then add the site to Google Search Console and open Security & Manual Actions > Security Issues. If the site is legitimate and you find nothing wrong, the article says to request one review anyway. Explain what NationScope Media is, who runs it and what the login is for.

What does a visitor see at the root of the site, a news homepage or a login form? And does the site use any third-party scripts, ads or widgets, or a template that copies another site’s design?