[WARNING] Fake Google Message

Status
Not open for further replies.

HostStage

Elite Member
Joined
May 20, 2010
Messages
2,083
Reaction score
1,836
Hey,

I just received this on 2 of my domains located on 2 different dedicated :

I know it is fake as i received it on an address which google shouldn't know about. I have no idea what is the purpose of the message, and there is no confirmation on the webmaster tool. I avoided to click on any link of course but this seems nasty. If you have insights would love to hear your input.


Dear site owner or webmaster of domain.org,
We recently discovered that some pages on your site look like a possible phishing attack, in which users are encouraged to give up sensitive information such as login credentials or banking information. We have removed the suspicious URLs from Google.com search results and have begun showing a warning page to users who visit these URLs in certain browsers that receive anti-phishing data from Google.
Below are one or more example URLs on your site which may be part of a phishing attack:
http://www.domain .org/~bokkingf/hail/asuvol.htm
Here is a link to a sample warning page:
http://www.google.com/interstitial?url=http://www.domain.org/~bokkingf/hail/asuvol.htm
We strongly encourage you to investigate this immediately to protect users who are being directed to a suspected phishing attack being hosted on your web site. Although some sites intentionally host such attacks, in many cases the webmaster is unaware because:
1) the site was compromised
2) the site doesn't monitor for malicious user-contributed content
If your site was compromised, it's important to not only remove the content involved in the phishing attack, but to also identify and fix the vulnerability that enabled such content to be placed on your site. We suggest contacting your hosting provider if you are unsure of how to proceed.
Once you've secured your site, and removed the content involved in the suspected phishing attack, or if you believe we have made an error and this is not actually a phishing attack, you can request that the warning be removed by visiting
http://www.google.com/safebrowsing/report_error/?tpl=emailer
and reporting an "incorrect forgery alert." We will review this request and take the appropriate actions.
Sincerely,
Google Search Quality Team
Note: if you have an account in Google's Webmaster Tools, you can verify the authenticity of this message by logging into https://www.google.com/webmasters/tools/siteoverview
 
a friend of mine got this once, and yes there was a phising site there so i suggest that you login to your site by cpanel or ftp and check for thoose files in the mail, if they are there delete them and go through your security, if they are not just ignore it
 
Have you made sure your site really isn't hacked?
 
It's not fake. From the research I just finished, it has to do with a vulnerability of the Apache server you are sharing with other sites. It would be a good idea to talk to your webhosting support.
 
How is it fake when the link goes directly to google? It sounds amateurish, but it could be google
 
It's not fake, and looking at the site, you should definitely know why you are receiving the email. Basically all Google is saying is they have deindexed the site until you get it resolved, and since you think they don't know about the website (lol) then you obviously aren't relying on any search traffic so I'd just carry on about your business and ignore it.
 
Status
Not open for further replies.
Back
Top