10

today Google Search Console show me some alert on my website

enter image description here

click on link "Malware detected?" open a page with details:

enter image description here

but the list "Sample URLs" is empty and also "Download all samples" download an empty document.

What happen? It seem a false positive. From the docs:

If Google Safe Browsing hasn't seen a particular binary before, Chrome may warn that it is uncommonly downloaded and could be dangerous. In these cases the warnings are lifted automatically if Google Safe Browsing verifies that it is benign.

If your site is showing uncommon download warnings, you can also request a review in Search Console.

On my website users can download some software (built by me), some day ago i have deployed a new release. I have checked with all Antivirus (the most populars) and it is safe. All my software are signed with good a certificate autority.

The question is: how can i fix this problem?

UPDATE

After the review, the problem is disappear/fixed.

Improve this question
10
  • 1
    Do you have a question? Maybe you want to know why there are false positives? Or if users from Google see this problem?
    – Stephen Ostermiller ♦
    Sep 15, 2017 at 16:05
  • 1
    Chrome may warn that it is uncommonly downloaded and could be dangerous this is a problem, because user think that my software are dangerous.
    – ar099968
    Sep 15, 2017 at 16:28
  • 1
    Yeah, hadn't seen that. Have you requested the review yet?
    – Stephen Ostermiller ♦
    Sep 15, 2017 at 16:29
  • 2
    I helped a client with the same issue last month. We requested a review and issue was resolved. False positive.
    – Kristian Svensson
    Sep 16, 2017 at 13:20
  • 1
    @MichaelRogers 2/3 days...
    – ar099968
    Dec 18, 2019 at 9:18

2 Answers 2

Reset to default
6

After the review, the problem is disappear/fixed. I raised a "review request" stating:

The malicious content report doesn't contain any specific link affected by malicious content and I believe, after thorough checking of my website and my server, that my website is safe and secure for the users.

After 3 days, I received the review successful email from google stating:

Google has received and processed your security review request. Google systems indicate that [name-of-my-website] no longer contains links to harmful sites or downloads. The warnings visible to users are being removed from your site. This may take a few hours to happen.

Looks like it was indeed a false alarm and I believe it is most likely triggered because of advertising links. Google seems check the website when i start a campaign on their own systems like "AdWords". This check can report false positive if founds some uncommon/unknown binary file like *.exe.

This policy is a bit questionable, because can kill little developers/software company that provide software for the niches.

Improve this answer
1
  • 1
    This stupid $%@ is a headache even for companies with 500k+ users...
    – Max Malysh
    Sep 11, 2019 at 14:02
5

My suggestion is that you install an ssl certificate on your website - though you blocked off your domain name, I noticed that you are using http://____, which in and of itself can trigger Google Chrome to give users a warning when visiting your site. Now considering that you are providing a software download, this will undoubtedly add more risk for your users who are downloading software from your site.

If you install an SSL cert (which is a known ranking factor & will enhance your visibility) as well as try hosting your software with a third party (such as github), I believe that this would be enough to resolve your issue.

Improve this answer

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.