Deceptive Site Ahead Warning

Here we explain steps to take if a Deceptive Site Ahead warning is appearing in a browser when viewing your site.  This warning occurs due to a domain being listed as containing possible malware.  

Resolve Deceptive Site Warning

1. If the website starts displaying a warning page about malware, take action
   1. Some major Internet browsers will start displaying warning pages when a website has been detected to have malware
      EXAMPLE: 
      
      
2. Why did this happen
   1. If using a popular Content Management System to design the site, hackers attempt to get in through a plugin/theme/template that was either not secure or out of date 
   2. These articles will help make sure the WordPress is kept up to date:
      1. Update WordPress from Admin Dashboard
      2. Update WordPress Plugins from Administrator Dashboard
      3. Update WordPress Theme from the Administrator Dashboard
         NOTE: Remember any plugins/themes that are out of date should either be removed or upgraded. Keeping a plugin/theme deactivated doesn’t protect the site from getting hacked and can be a vulnerability to the WordPress site.
3. What to do now
   1. Restore a Backup
      TIP: If using Backup Manager, follow starting at Step 4 in this guide.
      CAUTION: If the backup was created before the hack was noticed and the hacked files were backed up the restore will not work.
   2. Once the site is restored and in working order, it is important to update the site and reach out to a security professional to ensure that any vulnerabilities are addressed to avoid future hacking
   3. To check the site for malware use the following sites:
      1. Use Check Site Status to see why Google is marking the site as malicious
      2. Use Wordfence to check for Malware with WordPress
      3. Use the Sucuri SiteCheck
         TIP: This level of scan is external, it is unable to see the contents of the database/files and will not be as complete as some of the other alternatives.
      4. Scan site with iThemes Security Plugin for WordPress
      5. InMotion Hosting Technical Support can run scan for malware, just contact us
         1. If Hacks are found on the site contact a professional Security company such as Sucuri
      6. Review and follow the removal of Deceptive Site Warning Instructions from Sucuri
         NOTE: After this point, it’s just a waiting game. It is up to Google/Microsoft to confirm that the issue has been removed. Unfortunately, this is not able to be sped as they are in control of what they consider to be malicious.