Google Blogoscoped

Forum

Does a Site Have Malware? Google Provides Diagnosis  (View post)

Tony Ruscoe [PersonRank 10]

Friday, May 23, 2008
16 years ago11,693 views

Here's an intentionally suspicious website:
http://www.google.com/safebrowsing/diagnostic?site=http://malware.testing.google.test/testing/malware/

[Via: http://searchengineland.com/080523-075927.php]

Scott Hemmeter [PersonRank 0]

16 years ago #

Yahoo is listed as being a suspicious site. I wonder why. Yahoo Groups, you think?

TOMHTML [PersonRank 10]

16 years ago #

As I said on Ionut's blog, there are malwares on ebay.com and myspace.com

TOMHTML [PersonRank 10]

16 years ago #

Full of malicious software:
http://www.google.com/safebrowsing/diagnostic?site=astalavista.box.sk

Tony Ruscoe [PersonRank 10]

16 years ago #

It should also give you example of the URLs that contained the malware. For example, www.google.com doesn't show anything bad in the report:

http://www.google.com/safebrowsing/diagnostic?site=www.google.com

So is it likely that it's just one of its other subdomains?

Tony Ruscoe [PersonRank 10]

16 years ago #

Aha... I've found the offending subdomain:

video.google.com
http://www.google.com/safebrowsing/diagnostic?site=video.google.com

TOMHTML [PersonRank 10]

16 years ago #

http://www.google.com/safebrowsing/diagnostic?site=googlepages.com

TOMHTML [PersonRank 10]

16 years ago #

Well, Blogger is better
http://www.google.com/safebrowsing/diagnostic?site=blogspot.com

George R [PersonRank 10]

16 years ago #

How safe is all of "co.uk"?

http://google.com/safebrowsing/diagnostic?site=co.uk

   "Google has not visited this site within the past 90 days."

Does this include all subdomains?
Maybe this domain is not considered to be a site.

JohnMu [PersonRank 10]

16 years ago #

This is actually a part of our Safe Browsing API which you can use (almost) anywhere: http://code.google.com/apis/safebrowsing/

It's currently being used in Firefox 3 beta versions: http://kb.mozillazine.org/Browser.safebrowsing.malware.reportURL

I think it's really cool because I often see people who have issues regarding malware being injected on their sites. This (along with the information in Webmaster Tools) helps them to work things out fairly quickly :-).

Where would you use this API?

Jim McNelis [PersonRank 1]

16 years ago #

http://google.com/safebrowsing/diagnostic?site=sonicfever.com

the results don't seem to match. says there is malware, then says the site is clean. weird.

Juha-Matti Laurio [PersonRank 10]

16 years ago #

George, the service works with one domain only, i.e. 'theregister.co.uk' etc., not using 'co.uk'

JohnMu [PersonRank 10]

16 years ago #

Hi Jim, so the site itself is not seen as problematic, but it does have content which is seen as such. You can see that at:
   http://www.google.com/search?q=site%3Asonicfever.com%2Fcoppermine

If this is your site, you can verify ownership of that subdirectory in Google Webmaster Tools and submit a malware review. If everything is clean, the warning in the search results (as well as the warning when browsing there in FF3) should disappear.

The reason we do that is because we don't want to block access to parts of a site that are ok. I think that's pretty fair, but it does require a bit more work from the webmaster when something like this happens.

While the diagnostic page could be a bit clearer, if you see 30 out of 100 pages recognized as bad, installing 40 trojans and 20 worms, I think it's a good sign that you should be very, very careful there :-).

Jim McNelis [PersonRank 1]

16 years ago #

Thanks for clearing that up for me John.

Fortunately, it is not one of my sites.

Ajay pathak [PersonRank 1]

16 years ago #

my blog get cleanchit from Google

[URL removed – Tony]

Juha-Matti Laurio [PersonRank 10]

16 years ago #

Exploit Prevention Labs has its free LinkScanner Online service too,
located at
http://linkscanner.explabs.com/linkscanner/

Forum home

Advertisement

 
Blog  |  Forum     more >> Archive | Feed | Google's blogs | About
Advertisement

 

This site unofficially covers Google™ and more with some rights reserved. Join our forum!