> ## Documentation Index
> Fetch the complete documentation index at: https://docs.digitalfyre.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Site Shows Deceptive Site or SSL Warning

If your browser shows a security warning when visiting your site — such as "Your connection is not private", "Deceptive site ahead", or a certificate error — the cause depends on which warning is shown.

## "Your Connection Is Not Private" (SSL Certificate Error)

This means the SSL certificate is missing, expired, or does not match the domain.

**Certificate not installed** — if you have not yet installed an SSL certificate, see [Installing a Free Let's Encrypt SSL Certificate](/web-hosting/ssl/lets-encrypt).

**Certificate expired** — Let's Encrypt certificates renew automatically. If renewal failed, go to **Websites & Domains** → **SSL/TLS Certificates** in Plesk and reissue the certificate manually by clicking **Renew**.

**Domain mismatch** — ensure the certificate covers the exact domain your visitors are accessing (e.g. both `example.com` and `www.example.com`). Reissue the certificate and check both variants are included.

## "Deceptive Site Ahead" (Google Safe Browsing Warning)

This warning is issued by Google and means your site has been flagged for malware, phishing, or harmful content — not an SSL issue.

<Steps>
  <Step title="Scan for Malware">
    Log in to Plesk and check **Imunify360** under **Websites & Domains** for any detected malware or infected files. Clean any flagged files.
  </Step>

  <Step title="Review Your Site">
    Check for any recently added content, scripts, or plugins that may have introduced malicious code.
  </Step>

  <Step title="Request a Google Review">
    Once the site is clean, go to [Google Search Console](https://search.google.com/search-console) and submit a review request under **Security Issues**. Google typically reviews and clears the warning within a few days.
  </Step>
</Steps>

<Warning>
  Do not request a Google review until the malware has been fully removed. Submitting while infected will result in the warning remaining and may delay future review requests.
</Warning>

## Mixed Content Warning (Padlock with Warning Icon)

This occurs when a page loaded over HTTPS includes resources (images, scripts, stylesheets) served over HTTP. The fix is to ensure all asset URLs use `https://`. For WordPress sites, the [Better Search Replace](https://wordpress.org/plugins/better-search-replace/) plugin can update URLs across the database.