# my website keep getting detect as Dangerous

**URL:** <https://forum.infinityfree.com/t/my-website-keep-getting-detect-as-dangerous/121415>\
**Category:** Hosting Support\
**Created:** [October 18, 2026, 3:55pm UTC](https://forum.infinityfree.com/t/my-website-keep-getting-detect-as-dangerous/121415 "2026-10-18T15:55:41Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Tekeebay](https://forum.infinityfree.com/letter_avatar/tekeebay/32/5_5575768a8748004e209b776fc1b2916d.png) [@Tekeebay](https://forum.infinityfree.com/u/Tekeebay)\
**Post date:** [October 18, 2026, 3:55pm UTC](https://forum.infinityfree.com/t/my-website-keep-getting-detect-as-dangerous/121415/1 "2026-10-18T15:55:41Z")

</div>

### Website URL

[https://i2b2tin.rf.gd/?i=1](https://i2b2tin.rf.gd/?i=1)

### Error Message

Dangerous site Attackers on the site you are trying to visit may trick you into installing software or disclosing information such as your passwords, phone number, or credit card number. Chrome strongly recommends that you go back to stay safe. Learn more about this warning

### Other Information

Its is the 2th time my website get hacked put an Dangerous file then my website get blocked can someone help me to make it more secure

---

<div class="post-metadata">

**Author:** ![system](https://infinityfree-forum-uploads.s3.dualstack.eu-central-1.amazonaws.com/original/3X/b/0/b024fd3fa88bae093c9576e55c2c94e33f890206.svg) [@system](https://forum.infinityfree.com/u/system)\
**Post date:** [October 18, 2026, 3:55pm UTC](https://forum.infinityfree.com/t/my-website-keep-getting-detect-as-dangerous/121415/2 "2026-10-18T15:55:42Z")

</div>

Welcome to the InfinityFree community forum! Good to have you here.

- Most people answering here are volunteers. They’re often the fastest source of help. Admin (the only staff member) checks in about once a day for issues on our end.
- Volunteers can’t see your account or website. Share what you actually see, like error messages and what happens when you try something. That’s more useful than your theory of what’s wrong.
- AI tools often get InfinityFree wrong. If a volunteer’s advice differs from what an AI told you, please try the volunteer’s suggestion first.
- Solving an issue is a joint effort. Try the suggestions you get and report back what happened.

---

<div class="post-metadata">

**Author:** ![InfinityFreeBot](https://forum.infinityfree.com/user_avatar/forum.infinityfree.com/infinityfreebot/32/3715_2.png) [@InfinityFreeBot](https://forum.infinityfree.com/u/InfinityFreeBot)\
**Post date:** [October 18, 2026, 3:55pm UTC](https://forum.infinityfree.com/t/my-website-keep-getting-detect-as-dangerous/121415/3 "2026-10-18T15:55:59Z")

</div>

_Beep boop, I’m a bot! I dug through the forum to get you started. I sometimes get things wrong though, so do with this what you will until a human has a look._

The warning comes from Google Safe Browsing, an automated blocklist that Chrome uses. It means Google’s scanners think your site is hosting something harmful, and your own report of a “Dangerous file” fits that. Removing the file won’t clear the warning by itself. You also have to ask Google to review the site again.

This article explains how to do that with Google Search Console. Its Security Issues section should show what Google found, and once the problem is fixed you can request a review there:

> [@Why Do I See a "Deceptive Site Ahead" Warning on My Website?](https://forum.infinityfree.com/docs?topic=99495):
>
> If you’re trying to access your website and encounter a bright red warning page that looks something like this: Deceptive site ahead Firefox blocked this page because it may trick you into doing something dangerous like installing software or revealing personal information such as passwords or credit cards. Advisory provided by [Google Safe Browsing](https://developers.google.com/safe-browsing/v4/advisory). Don’t worry - you’re not alone. This article will explain what this warning means, why it appears, and what steps you can take to fix it. What…

The article’s advice for preventing a repeat is to keep your CMS, plugins and themes up to date, scan the site regularly, and secure any forms that take user input. I can’t tell how someone got in this time, and a second hack suggests the first cleanup left the way in open.

Two questions would help narrow it down:

- What is the site built with (WordPress, custom PHP, plain HTML), and which plugins or themes does it use?
- What was the file that appeared, and where in your files did you find it?

The address in your post is under rf.gd, but the hosting account on your profile has a different free subdomain, under fwh.is. Which one is the affected site?
