Google Safe Browsing

[aluigi]

I just noticed that zenhax is listed on Google Safe Browsing, but there are absolutely no details about what's the problem.

It's definitely caused by the attachments of some users (I bet on custom localization tools) but without any information it's difficult to take actions, and I have no desire to waste days with any complex google long procedure of verification and so on.

Any ideas is welcome.

[aluigi]

In the meantime the only database listing zenhax is scumware but those few attachments there are valid tools from iddaemon, delutto, swuforce and so on, some listed attachments don't even exist anymore

There are no detections reported on other scanners.

[aluigi]

From the details of Google Search Console -> Security Issues:

Code: Select all

Detected Issues
Harmful downloads

Description: These URLs host malware or unwanted software downloads. Learn more
Sample URLs: N/A

I'm curious to know how should I fix something unknown

[spiritovod]

aluigi, you can start with temporary removing of attachments, mentioned at scumware - some of them has noticeable amount of detections, including DrWeb, Kaspersky, Symantec and Microsoft signatures. Then submit the site for review again via Google Search Console. If it will pass, you can try to submit some of those attachments (obviously not those with 50% detections) via Report Issue option in the console to exclude them from detection.
If this problem will be ignored, I'm afraid eventually google may elevate it and even restrict linked google account.

[atom0s]

The way I had to deal with it was passwording every file on the site of mine that Google kept marking invalidly. That way their automated crawler can't actually open the files and mark them incorrectly. Kind of annoying for my end users, but does solve the issue from having anyone using Chrome get the giant red screen saying my site is harmful for no reason.

[aluigi]

I finally removed all the attachments listed on scumware.
It has been an horrible work because phpbb doesn't have any way to delete a specific attachment id, and all the filenames (including the removal done via HTTP POST) are not related to the id... really a nightmare done one by one and through a long search in the Attachments page.

I'm quite sure that this is not the only problem but without any detail from Google I can't do anything else.
I can't even request the review because it will then be longer if something is still found.

As far as I know this is something started recently probably last week so I suppose it's a recent attachment that triggered google.

There is no control over the attachments of the users.
I'm not aware of any other website listing zenhax.