Beep boop, I’m a bot! I dug through the forum to get you started. I sometimes get things wrong though, so do with this what you will until a human has a look.
The warning comes from Google Safe Browsing, an automated blocklist that Chrome uses. It means Google’s scanners think your site is hosting something harmful, and your own report of a “Dangerous file” fits that. Removing the file won’t clear the warning by itself. You also have to ask Google to review the site again.
This article explains how to do that with Google Search Console. Its Security Issues section should show what Google found, and once the problem is fixed you can request a review there:
The article’s advice for preventing a repeat is to keep your CMS, plugins and themes up to date, scan the site regularly, and secure any forms that take user input. I can’t tell how someone got in this time, and a second hack suggests the first cleanup left the way in open.
Two questions would help narrow it down:
- What is the site built with (WordPress, custom PHP, plain HTML), and which plugins or themes does it use?
- What was the file that appeared, and where in your files did you find it?
The address in your post is under rf.gd, but the hosting account on your profile has a different free subdomain, under fwh.is. Which one is the affected site?