Google issue reference: WNC-806900.
Latest detection: November 10, 2026.
Other Information
I have inspected the website’s PHP files and the HTML output of the affected pages. I have not found suspicious scripts, external advertisements, hidden iframes, or unauthorized redirects.
I have never installed third-party advertising, widgets, or external scripts on this website.
Please investigate possible server-side code injection, unexpected PHP configuration, or other hosting-level security issues.
IMPORTANT: This website contains important resident records, payment histories, and financial transactions. Please do not delete or modify any website files or database records without my explicit authorization.
I can provide screenshots from Google Search Console if needed.
Beep boop, I’m a bot! I dug through the forum to get you started. I sometimes get things wrong though, so do with this what you will until a human has a look.
We can’t remove this warning, and we don’t know why Google flagged the site. Only Google can lift a Safe Browsing listing, and only after you request a review in Search Console. Google doesn’t tell us its reasons, so the Security Issues report is the only place to find them.
Both flagged URLs are login pages, and that matters. Google’s scanners judge what a page looks like, not what it’s meant for. The article lists a few things that get legitimate sites flagged:
Login pages with no real public content in front of them.
A site that uses an organization’s name or logo, or acts on its behalf, without saying so.
A site that was hacked.
Here is the article. It covers how to check what was flagged, what to change and how to request a review:
Does login.php use the name or logo of another organization, such as a housing association or local authority? Is the login form the first thing a visitor sees, with no public homepage explaining who runs the site and what it’s for? If so, adding that information is the usual fix. The article’s advice is to add a public homepage, say who runs the site and use your own branding.
If you’ve gone through everything and still find nothing wrong, the article says to request a review anyway. Explain what the site is, who runs it and what the login is for. Request it only once, and only after any changes are made.
For the hacked-site possibility, the article says to remove files you don’t recognize and change your hosting account and admin passwords. Back up your files and database before you change anything, since you want them kept intact.