alexk74

Yesterday I almost installed a download from a phishing site if it hadn’t been for Chrome to block the download and mark it as suspicious.

I wanted to download PostgreSQL on my mac. I googled "install postgresql" and then click on the official PostgreSQL site. I was undecided about whether to install it via Homebrew or by downloading the app itself. I closed the tab and then I decided to download the PostgreSQL app. I quickly typed 'download postgres' and I clicked without looking on the first Google result. Again, I clicked download without looking, assuming it was the official site. Then Chrome warned me that the download was suspicious.

When I checked the website url, it was posfgresql.com instead of postgresql.com... I was in shock... I knew about phishing ads on Google, but I didn’t think it would happen to me.

I reported the ad to Google and the domain to Cloudflare (many phishing sites route through Cloudflare, likely because of the ease of setting up HTTPS).

Today, I received a response from Google stating:

Dear Alexandru,

We’re writing to let you know that we reviewed your report (ID 9-7817000036510).

Here's what we found

We decided not to take this ad down. We found that the ad doesn’t go against Google’s policies, which prohibit certain content and practices that we believe to be harmful to users and the overall online ecosystem.

I was in shock again. How is this possible to promote phishing ads and not even remove them after being reported? It is that hard to check the url redirect?

I checked the advertiser's page and all their ads are phishing urls...

Here's the advertiser's link:

https://adstransparency.google.com/advertiser/AR10215658740934246401

Facebook has a bug for a while and it happens for certain users only. The bug is that it does not display the list of the apps you have blocked.

It sounds not a biggy one, but if you block an app on Facebook you can no longer have the option to unblock it, you need first to retrieve the apps you have blocked and then click unblock.

So you are stuck and you can no longer access the app.

I've contacted developer support from Facebook and they told me it's not related to them and to contact Facebook Help Center.

It's been a few months and still no response from Facebook.

Maybe someone around here can trigger some investigation, who knows...

Thanks.