PDA

View Full Version : Slandered and ruined by G again, falsely accused of having a phishing site!!



Clint1
01-10-2010, 03:30 AM
Here we go again, and this time it's the worse negligent irresponsible stunt yet.

My main domain, totally white-hat, unique, useful, relevant, helpful........suddenly, overnight, was deleted from the G main index, AGAIN. About 220 pages showing in the site: operator, to 200, to 187, to 175, to about 166 where it remained for months. Then 3 days ago, that operator with the www prefix plummeted to 133. But without the www prefix, it remained at 166!! :confused: That has never happened, both versions always showed the same # within 1. From 133, to 127, 120 yesterday, 119 then 118 an hour later, to 102 today!!!!!!!

I have had a non-www to www 301 redirect on my main site for many years.

All of my redirects are working as usual, and my htaccess file is the same, and correct.

I am GONE FROM ALL SEARCHES. Where my pages were at the NUMBER ONE spots, or at least on the FIRST PAGE of results for hundreds of search phrases for TWELVE f--ing years, GONE.

But for the pages that show up with the site: operator without the www prefix, those pages are still at the #1 positions in the G SERP's!! (Albeit a very few not very important pages).

Now if that schitt isn't bad enough, I just logged into my G WMT area for my semi-main domain, and I'm presented with this lying slanderous bullschitt:

-------------------------------------------
Phishing notification regarding http://************.com/ December 14, 2009

Dear site owner or webmaster of http://************.com/,

We recently discovered that some pages on your site look like a possible phishing attack, in which users are encouraged to give up sensitive information such as login credentials or banking information. We have begun showing a warning page to users who visit this site in certain browsers that receive anti-phishing data from Google, as well as users redirected to this site from various Google properties.

Below are one or more example URLs on your site which may be part of a phishing attack:

http://www.************.com/~journa98/www.PayPal.Com22/www.PayPal.Com22/webscrcmd=_login-done&login_access=1190737782.htm


Here is a link to a sample warning page: http://www.google.com/interstitial?url=http://www.************.com/~journa98/www.PayPal.Com22/www.PayPal.Com22/webscrcmd%3D_login-done%26login_access%3D1190737782.htm

We strongly encourage you to investigate this immediately to protect users who are being directed to a suspected phishing attack being hosted on your web site. Although some sites intentionally host such attacks, in many cases the webmaster is unaware because:

1) the site was compromised

2) the site doesn't monitor for malicious user-contributed content

If your site was compromised, it's important to not only remove the content involved in the phishing attack, but to also identify and fix the vulnerability that enabled such content to be placed on your site. We suggest contacting your hosting provider if you are unsure of how to proceed.

Once you've secured your site, and removed the content involved in the suspected phishing attack, or if you believe we have made an error and this is not actually a phishing attack, you can request that the warning be removed by visiting this page, and reporting an "incorrect forgery alert." We will review this request and take the appropriate actions.

Sincerely,

Google Search Quality Team
-----------------------------------------
:shock: :palm: :shock: :palm: :shock: :palm:

Trembling, with chest pains and arrythmia, spitting blood, I TRIED to send this to the ba$tards at their "Report Incorrect Phishing Warning" page:

-----------------------
WHAT THE F**K IS THIS BULLSCHIT!?!?!? THERE'S NO SUCH GO*DAMN URL ANYWHERE ON MY LEGIT LAW-ABIDING GOOGLE-ABIDING DOMAIN, NOR HAS THEIR EVER BEEN, AND IF YOU DON'T REMOVE THIS SLANDEROUS LIFE-DESTROYING BUSINESS DESTROYING LYING CRAP I WILL START A CLASS ACTION LAWSUIT AGAINST YOU EVIL JERKS MILLIONS STRONG CONSISTING OF MILLIONS OF YOUR OTHER VICTIMS WHO HAVE BEEN WAITING FOR THE RIGHT TIME TO COME FORWARD AND EXPOSE YOUR ATROCITIES!! WE HAVE RECORDS DOCUMENTING AND PROVING YOUR IRRESPONSIBLE NEGLIGENT ATROCITIES GOING BACK MANY YEARS!!!!!!!

LOOK AT THIS, DOES THAT LOOK LIKE A LEGIT URL TO YOU???? http://www.************.com/~journa98/
www.PayPal.Com22/www.PayPal.Com22/webscrcmd%3D_login-done%26login_access%3D1190737782.htm NO!!! DOES THIS??? http://www.************.com/~journa98/ NO!!!!

HOW ABOUT **CHECKING** THE (MY) F**KING VICTIMIZED DOMAIN OUT TO SEE WHAT'S ON IT BEFORE YOU START WITH YOUR ERRONEOUS SLANDEROUS NEGLIGENT BULLSCHIT!! THAT'S AN OBVIOUS GO*DAMN ATTEMPT BY SOME SCUMBAG CRIMINAL CYBER-TERRORIST TO RUIN ME, AND AS ALWAYS, YOU JERKS ARE ALLOWING IT WITHOUT EVER CHECKING IT OUT!!!!!!!

YOU'VE ALREADY DESTROYED MY MAIN 12-YEAR-ONLINE BUSINESS BY DELETING EVERY GO*DAMN PAGE OF IT FROM YOUR F**KED-UP-ALGO INDEX (NO DOUBT, BY EITHER YOUR F**KED UP ALGO's, OR ALLOWING CYBER-TERRORISM AGAINST ME), AND NOW YOU'RE DESTROYING MY OTHER WEBSITE BUSINESS!! GET YOUR EVIL MICROCEPHALIC HEADS OUT OF YOUR ASSES!!!!!!!! LET'S SEE IF JUST ONE OF YOU EVIL SATANIC JERKS HAS THE DECENCY OF FACING ONE OF YOUR COUNTLESS VICTIMS!!!!! FACE ME!!! OR WILL YOU CONTINUE TO "COWER AND HIDE IN THE DARK"!!!!!!! THE TIME HAS COME WHEN YOU WILL NO LONGER BE JUDGE JURY AND EXECUTIONER, AND CAUSE COUNTLESS SUICIDES EACH YEAR BECAUSE OF YOUR RECKLESS, NEGLIGENT AND IRRESPONSIBLE EVIL ACTIONS!!!!!!!!!!!!!!!

Clint ********
OWNER:
************.com
**************.com
[ADDRESS]
[CITY, STATE, ZIP]
[PHONE]
[EMAIL ADDRESS]
[EMAIL ADDRESS]
------------------------

And this is what happens when I tried to send it by clicking the "Submit report" button:

414 Request-URI Too Large
The requested URL /safebrowsing/report_error/Captcha... is too large to process.

WTF does that mean???????? HOW am I supposed to contact these a$$holes now???

Obviously, from the disaster at both of my main domains now, someone is yet again trying (AND SUCCEEDING) in destroying me, and these pricks are allowing it.

Once again you see why I DESPISE these evil jerks and how they are destroying LEGIT businesses and lives and by the millions, and with no recourse of action for their victims!!!!

Perhaps I should just blow my f**king brains out now, with this on record and on my PC, and it may make the news, and I can be the one "martyred" that starts the move to expose and STOP these reckless negligent irresponsible evil ba$tards. It's totally pointless to bust your ass 12 hrs a day, 7 days a week, never a day off, never a vacation, for 12 years, (and 35 years total), remain HONEST, legit, law-abiding, yet have it all for nothing and RUINED by BOTH kinds scumbags; the cyber terrorists, and G for ALLOWING IT.

Clint1
01-10-2010, 03:55 AM
Look at what I found when searching for the criminal URL suffix:
~journa98/www.PayPal.Com22/www.PayPal.Com22/webscrcmd=_login-done&login_access=1190737782.htm :
PhishTank > Details on suspected phish #886065 (http://www.phishtank.com/phish_detail.php?phish_id=886065)

When you click the link "View site in new window" on that page, that's the exact same page I see when I try and click it on MY domain.
http://75.125.38.34/~journa98/www.PayPal.Com22/www.PayPal.Com22/webscrcmd=_login-done&login_access=1190737782.htm

Holy $hit, that's my IP address! More accurately, the IP address of the shared server on which my victimized site resides!

Mel
01-10-2010, 04:13 AM
Looks like that page no longer exists according to the phishtank website. Perhaps you should start a conversation with Google and perhaps submit a reinclusion request.

Clint1
01-10-2010, 04:18 AM
Looks like that page no longer exists according to the phishtank website. Perhaps you should start a conversation with Google and perhaps submit a reinclusion request.
I just asked the hosts of my site about this. G is lumping all hundreds of websites on the server as phishing websites.

Yeah I know, "Perhaps you should start a conversation with Google", but HOW?? Their webpage "Report Incorrect Phishing Warning" is no surprise not working. And by submitting a re-inclusion request you have to falsely admit to wrong doing, which I have NEVER done, but I did do that anyway and prefaced it with that fact.

Clint1
01-10-2010, 04:21 AM
My hosts just replied: "We have terminated the account with user name " journa98 " and now it is fine." A lot of good that does me now, and the hundreds of other sites on the server.

Mel
01-10-2010, 04:26 AM
Of course you can insulate yourself from such problems if youhost on a dedicated IP address. That has been my practice for several years now. I realize that this is kind of like closing the barn door after the horses are gone, but it is worth the little bit extra IMO.

Clint1
01-10-2010, 04:47 AM
............Trembling, with chest pains and arrythmia, spitting blood, I TRIED to send this to the ba$tards at their "Report Incorrect Phishing Warning" page:
------------------------
And this is what happens when I tried to send it by clicking the "Submit report" button:

414 Request-URI Too Large
The requested URL /safebrowsing/report_error/Captcha... is too large to process.

WTF does that mean???????? HOW am I supposed to contact these a$$holes now???

I even found a generic URL Report Incorrect Phishing Warning (http://www.google.com/safebrowsing/report_error/?tpl=generic&url=http://) and the same crap is still happening! Obviously they don't want anyone to be able to report this! Searches on this say that error happens when the URL is too long, but that is obviously not what's happening here!

EDIT: I see what their problem is, AFTER clicking the "Submit report" button they are making the resultant URL in the address bar.....the entire text in the comments box!! So they expect you to not put any explanation in their freakin' comments box!

Clint1
01-10-2010, 05:28 AM
Of course you can insulate yourself from such problems if youhost on a dedicated IP address. That has been my practice for several years now. I realize that this is kind of like closing the barn door after the horses are gone, but it is worth the little bit extra IMO.
Yes, unfortunately a lot more expensive, and while that would take care of problems exactly such as this, it still would not make one immune to other G screw-ups.

But it's not right for them to harmfully label hundreds of sites on a server in the first place. The criminal URL http://75.125.38.34/~journa98/www.PayPal.Com22/www.PayPal.Com22/webscrcmd=_login-done&login_access=1190737782.htm is not a sever-wide URL. So how it can be mistaken for that by them, and have them append that criminal suffix onto the other domains on the server is insane. That URL could only be accessed to a valid page two ways; as it is above, and via the scumbag's domain name. Therefore.....
http://ANYTHING-ELSE.com/~journa98/www.PayPal.Com22/www.PayPal.Com22/webscrcmd=_login-done&login_access=1190737782.htm
would have never worked!

What we need is a way to isolate/insulate/make immune from being wrongly slammed by their algo's. "SERP's insurance". Someone offering with that would make an absolute killing, until the claims rolled in.

chandrika
01-10-2010, 07:42 AM
Sorry to hear about this..

I had a look at google support forum and noticed that threads where similar thing had happened to other people were usually responded to by a Google employee called John Mueller. Perhaps he may be able to help you and there appear to be several ways to contact him in his profile
John Mueller - Google Profile (http://www.google.com/profiles/johnmu.com?hl=en)

Clint1
01-10-2010, 08:54 AM
Thanks. Yeah I know John from the G forums where I used to frequent. He was just a member there a couple or so years back, then he went to work for G.....he "joined the cult and drank the Kool-Aid" and hasn't been the same since. I don't really see any way of contacting him though.

I thought about just posting this WPW page's URL at his and Matt Cutt's website blogs, but they probably would never get posted.

I'll think more on this tomorrow after I've tried to sleep.

SteveGerencser
01-10-2010, 06:40 PM
This is why you shouldn't rely on Google for your traffic and your business.. But you already knew that..

VPS hosting is the next best thing to dedicated IPs.. Its not much more expensive and all your own sites sit on your own IP address.. So if your hosting company does something stupid like let a phisher host there, you aren't automatically flagged in the attack..

But, it happens.. We had a site get compromised a while back and once the issue was found, corrected, and patched, we recovered very quickly and it was all better.. Minus the few days it took to get re-included..

Of course, you can stand firm and refuse to use the re-inclusion form so that you don't have to admit to doing something that you never did.. But does that really help you any??

Clint1
01-11-2010, 07:32 AM
This is why you shouldn't rely on Google for your traffic and your business.. But you already knew that..
It's not a matter of "relying", it's the way the internet works (http://www.webproworld.com/google-discussion-forum/96162-google-dropped-my-site-all-my-keywords-almost-overnight.html#post488721).



Of course, you can stand firm and refuse to use the re-inclusion form so that you don't have to admit to doing something that you never did.. But does that really help you any??
I mentioned above that I already did that in my post #4.

mjtaylor
01-11-2010, 09:03 AM
I have had several client sites hacked and put in the same boat. I removed the problems, reinstalled the site. I applied for review and received it the same day with no damage to the sites' SERPs. Google does understand that sites get hacked on regular basis.

This may be a different experience than yours, of course. I do think the distinct IP is a good way to go.

Clint1
01-11-2010, 09:10 AM
I have had several client sites hacked and put in the same boat. I removed the problems, reinstalled the site. I applied for review and received it the same day with no damage to the sites' SERPs.
How exactly do you apply for a "review"? Is that the reinclusion request?



Google does understand that sites get hacked on regular basis.
They "understand" it, but their response to such is to penalize all sites on the server.



This may be a different experience than yours, of course. I do think the distinct IP is a good way to go.
Do you mean "dedicated" IP?

Clint1
01-11-2010, 09:15 AM
BTW, the problem mentioned in the first part of my first post has "corrected itself". :confused:

mjtaylor
01-11-2010, 09:19 AM
How exactly do you apply for a "review"? Is that the reinclusion request?

It's been a while. There were links to request a review. In one recent case it was definitely a reinclusion, as the site had been removed entirely. And it occurred several years ago as well. Some have been "reviews" .. in both cases there were links in Webmaster Tools to request the review or reinclusion.


They "understand" it, but their response to such is to penalize all sites on the server.

Another reason to have a distinct IP ... ;)


Do you mean "dedicated" IP?

Yes, I meant dedicated, which would make it distinct. But yes, I made a mistake, and I agree that terminology is important.

And I meant to say in my last post, I am sorry you are having to go through this.

morestar
01-11-2010, 11:38 AM
Hey Clint, sorry for the news...

Can you tell us who your host is?

kgun
01-11-2010, 12:10 PM
Clint, I understand your frustration, but
hopefully you can listen to an experienced man.
Before you shoot, be sure that you shoot on the correct person / company. Are you 100 % sure that a competitior is not involved?
Example: I have two mobile phone numbers. When I bought the last, I got an old number (there are too few numbers here), most probably, earlier owned by a person in a criminal network. I started to get some very nasty calls and SMS's in addition to tapping my cash card. The last was a direct death threat. I found out that that was not directed to me, but to another person that had forwarded one or more of his 5 telephones to me. Most probably self defence to get publicity.
Cyber criminality is becoming more and more advanced, so be 100 % sure that you shoot on the right person / company before you shoot.
And my personal advice "cultivate your language". That will be a big advantage to you if you ever end up in a court.
Some professionals will not take your OP serious because of the language.

morestar
01-11-2010, 12:28 PM
Clint, I understand your frustration, but
hopefully you can listen to an experienced man.
Before you shoot, be sure that you shoot on the correct person / company. Are you 100 % sure that a competitior is not involved?
Example: I have two mobile phone numbers. When I bought the last, I got an old number (there are too few numbers here), most probably, earlier owned by a person in a criminal network. I started to get some very nasty calls and SMS's in addition to tapping my cash card. The last was a direct death threat. I found out that that was not directed to me, but to another person that had forwarded one or more of his 5 telephones to me. Most probably self defence to get publicity.
Cyber criminality is becoming more and more advanced, so be 100 % sure that you shoot on the right person / company before you shoot.
And my personal advice "cultivate your language". That will be a big advantage to you if you ever end up in a court.
Some professionals will not take your OP serious because of the language.


With that I was going to add that it's possible that the swear words in your message to G triggered a filter.

But we all do understand your pain...

Uncle Dog
01-11-2010, 12:39 PM
I was put off responding to the OP because you were SHOUTING a lot and rather incoherent. However, I agree with morestar we all do understand your pain...

ArtphotoasiA
01-11-2010, 01:14 PM
Just my 2 cents.......
Start a conversation with the big G is quite hard if not quite impossible.... like with every dictatorship.

What I would like from the big G is:

1) a warning by email if something happen
2) soemone that will listen your reasons

no one of te above happen...

1) no warning so you will be banned, or you will lose positions, or your account will be closed
2) no one will listen

i love some big G service like G map and G analytic.... really amazing free tools...... but beside that we all are living a 100% dictatorship online.... waiting to see the bubble explode!

mjtaylor
01-11-2010, 06:10 PM
Just my 2 cents.......
Start a conversation with the big G is quite hard if not quite impossible.... like with every dictatorship.

What I would like from the big G is:

1) a warning by email if something happen
2) soemone that will listen your reasons

no one of te above happen...

1) no warning so you will be banned, or you will lose positions, or your account will be closed
2) no one will listen

i love some big G service like G map and G analytic.... really amazing free tools...... but beside that we all are living a 100% dictatorship online.... waiting to see the bubble explode!


If you pay for it, you can have it. This is not a dictatorship, this is a free, capitalist market. When I ran an Adwords campaign that spent several thousand a month I had no trouble having a conversation with a Googler.


There's a plaque on a bar in Key West that reads: No Sniveling.

Feeling sorry for yourself is one thing, but being confused about reality is another. Wait, they are the same things!

Clint1
01-16-2010, 12:28 AM
Hey Clint, sorry for the news...

Can you tell us who your host is?
The host for my main site is HostGator. The host for my site that G tagged as a Phishing site is EhostPros.

In post #5 I mentioned I contacted my hosts about this and all they said was "the account ~journa98 has been terminated."

Clint1
01-16-2010, 12:32 AM
With that I was going to add that it's possible that the swear words in your message to G triggered a filter.

But we all do understand your pain...

No they were all edited out when I tried to send it. I mentioned in post #7 above what their problem was with the form. What I eventually did (and was the reason for starting this thread, trying to find out HOW to contact them about being falsely accused), was I just put the link to this thread in the report.

Clint1
01-16-2010, 01:03 AM
Before you shoot, be sure that you shoot on the correct person / company. Are you 100 % sure that a competitior is not involved?
No, I'm not sure either way. I can only speak and surmise from past experiences. The bottom line is I know G will allow others (either competitors or cyber-terrorists in general) to harm your site and their SERP's. By whom is essentially irrelevant since those victimized will usually never find out exactly who did it.



Cyber criminality is becoming more and more advanced, so be 100 % sure that you shoot on the right person / company before you shoot.
The only person I was comptiplated shooting was myself. ;)



And my personal advice "cultivate your language". That will be a big advantage to you if you ever end up in a court.
Some professionals will not take your OP serious because of the language.
First, none of the "little peons" will ever end up in court with G. ;)

I fully understand what you're saying, but you need to know the long history here. As you've heard, I've been dealing with their atrocities for over a decade, (and cyber-terrorism for over 12 years). G is totally used to hearing "the civil approach", of which I'll point out that I tried on countless occasions to no avail. All of the first messages I attempted to ever get to them were always civil. They never worked.

G needs to realize they are not dealing with an "automaton" without feelings, who doesn't really care what's going on. They need to realize they are dealing with people, with lives, with businesses, with feelings, and with everything to lose.

It is not until someone puts "a personal" spin on something that they realize the serious gravity of a certain situation.

As you know from many posts of mine you were kind enough to comment on, I can be very civil and articulate, in fact that's how I generally am. But I've found over the years that sometimes "raw emotion" is all not only they can understand, but many others as well. Sometimes you "really need to get someone's attention".

As I mentioned in post #15, that first issue seems to have corrected itself. But I also did a re-inclusion request on it when I noticed that was happening. I actually, shockingly, got emails today on both domains saying they've "processed" the re-inclusion request. On my domain that was erroneously tagged as phishing, my G SERP's were apparently never really harmed. In fact today, it's back at the #5 spot on the first page (it had dropped to last on the first page), so it's back where it was.

My main domain has its pages coming back in the index, up a few, still a long way to go to where it was. But they seem to have at least gotten their www prefix issue taken care of.

I've been away for a couple of days, and I will probably be away again. I just had to get to my PC to check for customers' emails and I thought I would come back here for a bit. We have a serious illness in the family and it doesn't look good. It's been going on for more than month, but has gotten worse. There's nothing sadder than this. Like Kjell said not long ago, (to paraphrase), we need to get the hell away from our PC's, forgot about the so-called "problems" they can cause us and look at what's REALLY important in life--health and family.

Clint1
01-16-2010, 01:08 AM
I was put off responding to the OP because you were SHOUTING a lot and rather incoherent. However, I agree with morestar we all do understand your pain...
I covered that in my post #25. Also their form is just a plain text form, no formatting. So CAPS is the only way to really show emphasis. That was just a copy 'n paste from the form.

Clint1
01-16-2010, 01:13 AM
Just my 2 cents.......
Start a conversation with the big G is quite hard if not quite impossible.... like with every dictatorship.

What I would like from the big G is:

1) a warning by email if something happen
2) soemone that will listen your reasons

no one of the above happen...

1) no warning so you will be banned, or you will lose positions, or your account will be closed
2) no one will listen

i love some big G service like G map and G analytic.... really amazing free tools...... but beside that we all are living a 100% dictatorship online.... waiting to see the bubble explode!
Couldn't agree more. After all, that's the civil, reasonable and responsible things to do, but G hasn't been reasonable, civil nor responsible since their PR came out.

At least this time I actually got emails from them. But that's after damages have been done, that never should have occurred in the first place.

Later guys. Kind thoughts and prayers. They work miracles.

kgun
01-16-2010, 08:54 AM
At least this time I actually got emails from them. But that's after damages have been done, that never should have occurred in the first place.

Don't forget


It is automatic algorithms and filters that has errors and can be manipulated by a third person / company.
Google indexes millions of domains and billions of pages.
One of the reasons I see that Google is so efficient is that it is a minimalistic company. (http://www.informationweek.com/news/software/linux/showArticle.jhtml?articleID=192300292) That may be one of the reasons why it is IMO the best native search engine. Are you sure that the alternative(s) are better?
I assume they have millions of similar applications daily.
So in sum, note that it is a big harware and software company that is most probably stripped to a minimum on people.



There's nothing sadder than this. Like Kjell said not long ago, (to paraphrase), we need to get the hell away from our PC's, forgot about the so-called "problems" they can cause us and look at what's REALLY important in life--health and family.
My bolding. Your health and your family is most important. I can not tell you how much 4 weeks holiday away from the computer helped me. I am another person.


As you know from many posts of mine you were kind enough to comment on, I can be very civil and articulate, in fact that's how I generally am. But I've found over the years that sometimes "raw emotion" is all not only they can understand, but many others as well. Sometimes you "really need to get someone's attention".

You shall know that I can be very much the same and it has never, never been to my advantage. So my advice to other people is: Always, always be polite.



In post #5 I mentioned I contacted my hosts about this and all they said was "the account ~journa98 has been terminated."
So you have a case with you hoster too. I have had many and left two. Now I have three, a professional expensive Norwegian, a semi professional cheap Danish and a cheap more and more professional and service minded American.

conortreacy
01-17-2010, 02:29 AM
Some of this blame can also be shared with your host for not configuring the server and locking down the sharing of information. In cpanel (which is what they use) there is an option to disable users from accessing sites via the "~username" attribute. Not only can it get you blocked (as you see) but it will cause problems with PCI Compliance scans and bandwidth logging. With a host as big as they are, I'm surprised they're not more concerned with not being able to track a particular users bandwidth on the server.

There's a simple setting inside of WHM to "Enable mod_userdir Protection" - If your host would do that, then the whole issue of the "~username" would not have played a part, and instead just the SINGLE user would have been affected.

This is something that has been well documented in cPanel for many years as a potential issue, I'm surprised that a host as large as they are, are dragging their heals!