New issue
Advanced search Search tips

Issue 898366 link

Starred by 2 users

Issue metadata

Status: Closed
Owner:
Closed: Nov 2
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Android
Pri: 2
Type: Bug



Sign in to add a comment

chrome indicated vip.com as harmful website

Reported by zishanm...@gmail.com, Oct 24

Issue description

Steps to reproduce the problem:
open http://www.vip.com in chrome

What is the expected behavior?

What went wrong?
Hi chrome team folks

I am security leader from vip.com(topsite in China).  we recently found chrome indicated vip.com as harmful website (see attachment). It is really bad influence for vip.com. please help us indicate what issue we have on issue. please work on it quickly.

Did this work before? N/A 

Chrome version: 69.0.3497.100  Channel: stable
OS Version: 8.1
Flash Version:
 
WechatIMG163(1)(1).jpeg
76.6 KB View Download
Issue 898368 has been merged into this issue.
Components: Services>Safebrowsing
Labels: -Type-Bug-Security -Restrict-View-SecurityTeam Type-Bug
Owner: nparker@chromium.org
Status: Assigned (was: Unconfirmed)
nparker, could you please help route this? 

I can see this on Chrome on Android (70), but not macOS. 

https://transparencyreport.google.com/safe-browsing/search?url=vip.com&hl=en also does not report anything.
The site shows a warning under normal browsing mode, but does not when Data Saver is enabled. So it's blacklisted on the mobile list but not on the desktop list.  I'll dig into this a little.
@nparker Thank you very much, would you please dig into this ASAP? 
@nparker,I‘m not being rude, but would you please tell me  what the result is about this issue?
I don't have any new information at this time. You should file an appeal via the search console, https://search.google.com/search-console/about
hi nparker, we finished verification as follows, and no harmful files founded by search console. would you please tell us what else we can do next? Thank you very much.
IMG_1977.JPG
12.4 KB View Download
IMG_1976.JPG
14.4 KB View Download
sorry, update verification in English
IMG_1985.BMP
1.2 MB Download
IMG_1984.BMP
1.2 MB Download
Hi Zishan, 

Google has detected mobile unwanted software on one or more downloads from vip.com. An app that violates our unwanted software policy (https://www.google.com/about/company/unwanted-software-policy.html) will show a warning to users either within the mobile browser or upon downloading the app.

Below is the part of the policy that is relevant to the violation that our system found:
“Software that collects and/or transmits users’ personal information must be transparent about it by providing an explanation in clear and straightforward language that describes what information would be collected or transmitted and for what purpose. The language should be clearly visible and easy to read on the screen. Disclosure is especially important if data collection is a non-obvious feature of the software.”

For more detail on how you could modify your app to make it compliant, please review this detail from our malware and unwanted software help center article (https://support.google.com/webmasters/answer/3258249?hl=en):
“Inform users of your intent to collect their data.  Provide users an opportunity to agree to the collection of their data before you start collecting it, including data about third-party accounts, installed apps, and files on the mobile device. Personal or sensitive user data collected should be handled securely, including being transmitted using modern cryptography (for example, over HTTPS)."
"For non-Play apps, you must disclose your data collection to the user in the app. For Google Play apps, disclosure must adhere to Play policy. Do not collect data that goes beyond the published use of your application.”

The violation detailed above is an example of the primary policy violation found by our systems. This notice may not cover every violation that was found, and it may not be a comprehensive list of malware and unwanted software showing alerts from vip.com.

Once your site and app are compliant, request a review (https://support.google.com/webmasters/answer/168328) in Search Console. Please refer to the Play Console Help Center (https://support.google.com/googleplay/android-developer/answer/2992033) for more information on how to remove app verification warnings from Google Play. For additional guidance, please refer to our malware and hacked sites web forums (https://productforums.google.com/forum/#!topicsearchin/webmasters/category$3Amalware--hacked-sites%7Csort:relevance%7Cspell:false). For more information on Google Safe Browsing, please see our Safe Browsing Transparency Report (https://www.google.com/transparencyreport/safebrowsing/faq/?hl=en).

Thanks,

Status: Closed (was: Assigned)
Thanks mtt@. Closing Chrome bug since there's no client-side issue.

Sign in to add a comment