New issue
Advanced search Search tips

Issue 923220 link

Starred by 1 user

Issue metadata

Status: Untriaged
Owner: ----
Components:
EstimatedDays: ----
NextAction: ----
OS: ----
Pri: 3
Type: Bug



Sign in to add a comment

Omnibox suggests spam site

Project Member Reported by rockot@google.com, Jan 18 (5 days ago)

Issue description

I'm assuming maybe this is a backend issue but I don't know the right place to report it if so. Maybe owners can help.

If I start type "barcl" into the omnibox in a clean profile (no omnibox history), the top suggestion from Chrome is "barclayus.com". This is a spam site, and there doesn't seem to be any way from within Chrome to report it as such. The expected (non-spam) site would be "barclaysus.com", and it's of course super easy to overlook the difference and navigate to Chrome's spammy suggestion instead.
 

Comment 1 by k...@chromium.org, Jan 18 (4 days ago)

Labels: Needs-Feedback
Hi rockot@, The first thing to do is visit chrome://omnibox, enter 'barcl', and copy here the line which recommends 'barclayus.com'. It might be a previous typo or related. (It's not being recommended to any of my accounts.)

Comment 2 by rockot@google.com, Jan 18 (4 days ago)

I think I see what happened. It only got into my suggestions for "barcl" once I accidentally clicked the bad suggestion one time.

From a totally clean profile (apparently there was history I wasn't familiar with), the bad suggestion only appears once you type "barclayu". While of course this is understandably not going to match "barclaysus.com", it still definitely does recommend "barclayus.com/activate" which looks a lot like a valid card activation URL but is very much just spam.

Oddly I don't see it on desktop, but on Android for "barclayu" the chrome://omnibox result has:

- Provider: Search
- Type: navsuggest
- Relevance: 602
- Contents: barclayus.com/activate

Comment 3 by k...@chromium.org, Jan 18 (4 days ago)

Labels: -Needs-Feedback
Thanks. So Search provider suggestions come from google.com (or your default search provider). I've reported the bad result internally.

Sign in to add a comment