Dangerous site
Attackers on the site you tried visiting might trick you into installing software or revealing things like your passwords, phone, or credit card numbers. Chrome strongly recommends going back to safety. Learn more about this warning
Other Information
Other Information:
Before this issue occurred, my website was working normally, including the homepage, contact page, and administrator dashboard.
I recently updated my db_connect.php file while adding additional database security configurations for SSL and SQL connections. After making this change, I started experiencing access problems with my administrator dashboard and received security warnings from Google Chrome.
I restored my original db_connect.php file to check whether the changes were responsible, but the SSL warning remained.
I also checked my website using Google Safe Browsing, but the result showed “No available data.”
The SSL certificate currently presented by my website appears to have expired on October 29, 2025.
I have not intentionally changed or installed a new SSL certificate.
Could you please check whether this issue is related to the system-wide SSL certificate for InfinityFree free subdomains?
I would appreciate your assistance in restoring secure HTTPS access to my website.
Welcome to the InfinityFree community forum! Good to have you here.
Most people answering here are volunteers. They’re often the fastest source of help. Admin (the only staff member) checks in about once a day for issues on our end.
Volunteers can’t see your account or website. Share what you actually see, like error messages and what happens when you try something. That’s more useful than your theory of what’s wrong.
AI tools often get InfinityFree wrong. If a volunteer’s advice differs from what an AI told you, please try the volunteer’s suggestion first.
Solving an issue is a joint effort. Try the suggestions you get and report back what happened.
Beep boop, I’m a bot! I dug through the forum to get you started. I sometimes get things wrong though, so do with this what you will until a human has a look.
The text you quoted (“Dangerous site… might trick you into installing software or revealing things like your passwords”) is Google Safe Browsing’s warning. It isn’t a certificate error. Chrome shows an expired certificate on a different page, titled “Your connection is not private”. Which of the two do you see when you open the site? If it’s the second, what error code is shown under it (something like NET::ERR_CERT_...)?
If it is the red “Dangerous site” page, this article explains what it means and how to get it removed:
Safe Browsing flags sites that look like phishing, and that includes false positives. The article says new websites with little history are judged more strictly. It also says sites where the first thing a visitor sees is a login form, with little else to explain the site, get flagged more often. Your account is only a couple of days old. Does your homepage, or any page Chrome could land on, show a login form or use another brand’s name or logo? Also, only Google can remove the listing, and only after a review request. The article covers Search Console and the report form for that.
The article also says free subdomains get HTTPS from a system-wide certificate that is applied automatically, so changing db_connect.php wouldn’t have changed the certificate your site presents. The database SSL settings you edited are a separate thing from the website’s HTTPS.
I would like to clarify that I have encountered both warnings at different times.
When I initially tried accessing the View Message page from my administrator dashboard, Chrome displayed the red Google Safe Browsing “Dangerous site” warning.
When I tried opening my website directly, including my contact page, Chrome displayed “Your connection is not private” with the error code:
NET::ERR_CERT_AUTHORITY_INVALID
I also inspected the SSL certificate and found that it was issued by ZeroSSL ECC Domain Secure Site CA and expired on October 29, 2025.
My website is a personal portfolio and web design business website called Ayieh’s Design. The homepage contains information about my services, portfolio projects, and contact form. The administrator login is located separately in the admin folder.
I recently modified my db_connect.php file to improve database security, but I restored the original code and the warnings continued.
Could you please help me investigate both the Google Safe Browsing warning and the SSL certificate issue?
That’s interesting, because those are actually two different issues. ERR_CERT_AUTHORITY_INVALID means that the certificate was not provided by a trusted vendor, but the inspection suggests that it was issued by a trusted vendor (ZeroSSL), but it expired.
The expired certificate is probably a side effect of DNS caching. Usually, that means that your browser is not connecting to the correct IP address of your website, but the IP address of the parking page that we point unused domains to. That page has an outstanding issues that it doesn’t get the updated SSL certificates that we use on actual website servers.
Your domain is over two days old by now, which means most DNS caching should already have cleared up, but it can sometimes take longer, which is why we say that it can take up to 72 hours.
As for the safe browsing warning, there is little we can do for you to solve that. That’s between you and Google. The article Lemni shared has the details, but the gist is that Google is vague, and there is a good chance that the listing is a false positive. Try to identify and solve any issues you can find, then request a review and hope for the best.