Weird Email from Google

Discussion in 'Legal Issues' started by UNBREAKABLE, Aug 15, 2009.

  1. #1
    I have 2 websites... and got the same letter for both. What do I do? Have I been hacked? We are legit companies.

    Dear site owner or webmaster of xxxxxxxxxxx.com,

    We recently discovered that some of your pages can cause users to be infected with malicious software. We have begun showing a warning page to users who visit these pages by clicking a search result on Google.com.

    Below is an example URL on your site which can cause users to be infected (space inserted to prevent accidental clicking in case your mail client auto-links URLs):

    http://xxxxxxxxxxl .com/

    Here is a link to a sample warning page:
    http://www.google.com/interstitial?url=http://xxxxxxxx.com/

    We strongly encourage you to investigate this immediately to protect your visitors. Although some sites intentionally distribute malicious software, in many cases the webmaster is unaware because:

    1) the site was compromised
    2) the site doesn't monitor for malicious user-contributed content
    3) the site displays content from an ad network that has a malicious advertiser

    If your site was compromised, it's important to not only remove the malicious (and usually hidden) content from your pages, but to also identify and fix the vulnerability. We suggest contacting your hosting provider if you are unsure of how to proceed. StopBadware also has a resource page for securing compromised sites:
    http://www.stopbadware.org/home/security

    Once you've secured your site, you can request that the warning be removed by visiting
    http://www.google.com/support/webmasters/bin/answer.py?answer=45432
    and requesting a review. If your site is no longer harmful to users, we will remove the warning.

    Sincerely,
    Google Search Quality Team
     
    UNBREAKABLE, Aug 15, 2009 IP
  2. mjewel

    mjewel Prominent Member

    Messages:
    6,693
    Likes Received:
    514
    Best Answers:
    0
    Trophy Points:
    360
    #2
    Without knowing the url, it would be impossible to say what is causing the issue. You should probably contact you hosting provider or check the file dates on your host to see if there have been any recent changes.
     
    mjewel, Aug 15, 2009 IP
  3. John Collins

    John Collins Peon

    Messages:
    28
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #3
    I went to the link to the sample warning page above and it looks bogus to me. I did a search and there are mentions of people getting similar emails. If you put your site URL in Google address bar and go there you will get a warning if there is a problem. If you try that and you don't see one you should be fine and consider the email a fraud.

    Google does have a warning page but it has a black background and a red warning box. It has an icon od a guy holding a sign followed by the text -

    Reported Attack Site!
    This web site at www XXXXXXXX com has been reported as an attack site and has been blocked based on your security preferences.
    Attack sites try to install programs that steal private information, use your computer to attack others, or damage your system.
    Some attack sites intentionally distribute harmful software, but many are compromised without the knowledge or permission of their owners.
    Below the text are 2 buttons that say -
    1- Get me out of here! and 2- Why was this site blocked
    In the bottom right says - Ignore this warning

    Here is a site you can see it in action - www squidookiller com
    You will be blocked and would be infected.
     
    John Collins, Aug 15, 2009 IP
  4. UNBREAKABLE

    UNBREAKABLE Peon

    Messages:
    504
    Likes Received:
    3
    Best Answers:
    0
    Trophy Points:
    0
    #4
    Hi John,

    I sent you a PM with the web address (please don't post them here) You seem like you know what you are talking about so maybe you can help us.
     
    UNBREAKABLE, Aug 15, 2009 IP
  5. j4k3yyy

    j4k3yyy Peon

    Messages:
    35
    Likes Received:
    1
    Best Answers:
    0
    Trophy Points:
    0
    #5
    The reported attack site page has nothing to do with google, it's mozilla firefox's built in defence against browser exploits and malware however you're correct in saying squidoo is blocked.

    http://www.google.co.uk/search?q=ww...s=org.mozilla:en-US:official&client=firefox-a

    Second link down :)

    UNBREAKABLE, if you want to pm me the url's and i'll take a quick look at them for you. I'll be able to tell you if they're blocked from google and/or infected.

    w0rd.
     
    j4k3yyy, Aug 16, 2009 IP
  6. Rian

    Rian Well-Known Member

    Messages:
    1,763
    Likes Received:
    48
    Best Answers:
    0
    Trophy Points:
    125
    #6
    Do you make use of popup or intersitial ads?

    A short while ago I made use of popup ads from a known company. What I did not know was that some ads were infected.

    I heard of a guy who also had the same problems with popup ads and who then received same notice from G.
     
    Rian, Aug 16, 2009 IP
  7. UNBREAKABLE

    UNBREAKABLE Peon

    Messages:
    504
    Likes Received:
    3
    Best Answers:
    0
    Trophy Points:
    0
    #7
    We do not use any ads period. We are a non-profit. We dont use our website to gain money. They really are blocked on google. I will have to figure something out.
     
    UNBREAKABLE, Aug 16, 2009 IP
  8. SemiJop

    SemiJop Guest

    Messages:
    76
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #8
    Your site may have been compromised by hackers. I suggest taking a closer look.
     
    SemiJop, Aug 16, 2009 IP
  9. lovelylady

    lovelylady Guest

    Messages:
    37
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #9
    you should check your site nowadays there are plenty of hackers
     
    lovelylady, Aug 16, 2009 IP