# Chrome's safe browser detects a site (Deceptive site ahead)

**URL:** <https://forums.rocket.chat/t/chromes-safe-browser-detects-a-site-deceptive-site-ahead/17265>\
**Category:** Community Support\
**Tags:** rocketchat-apps, docker\
**Created:** [July 11, 2023, 7:30pm UTC](https://forums.rocket.chat/t/chromes-safe-browser-detects-a-site-deceptive-site-ahead/17265 "2023-07-11T19:30:02Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![micron1390](https://avatars.discourse-cdn.com/v4/letter/m/cc9497/32.png) [@micron1390](https://forums.rocket.chat/u/micron1390)\
**Post date:** [July 11, 2023, 7:30pm UTC](https://forums.rocket.chat/t/chromes-safe-browser-detects-a-site-deceptive-site-ahead/17265/1 "2023-07-11T19:30:02Z")

</div>

### Description

Hello,  
Chrome safe browser listed my subdomain as a suspicious site (Deceptive site ahead) on which rocketchat is running, how can I fix this? add recursive dns-records? A record is added.

### Server Setup Information

- Version of Rocket.Chat Server: 6.2.5
- Operating System: debian11
- Deployment Method: docker
- Number of Running Instances: 1
- DB Replicaset Oplog:
- NodeJS Version:
- MongoDB Version: 5.0.18
- Proxy: nginx
- Firewalls involved:

### Any additional Information

thanks in advance.

---

<div class="post-metadata">

**Author:** ![micron1390](https://avatars.discourse-cdn.com/v4/letter/m/cc9497/32.png) [@micron1390](https://forums.rocket.chat/u/micron1390)\
**Post date:** [July 31, 2023, 12:46pm UTC](https://forums.rocket.chat/t/chromes-safe-browser-detects-a-site-deceptive-site-ahead/17265/2 "2023-07-31T12:46:32Z")

</div>

Hi everyone  
Do you have any ideas. Can add some dns records?  
Please help

---

<div class="post-metadata">

**Author:** ![4yBAK](https://avatars.discourse-cdn.com/v4/letter/4/958977/32.png) [@4yBAK](https://forums.rocket.chat/u/4yBAK)\
**Post date:** [August 2, 2023, 3:17pm UTC](https://forums.rocket.chat/t/chromes-safe-browser-detects-a-site-deceptive-site-ahead/17265/3 "2023-08-02T15:17:33Z")

</div>

Hello!  
I have the same problem.  
Google safe browsing found something in rocket.mydomain.dn/channels/general, and then marked the entire domain as phishing. Rocket-chat version 6.2.10.

---

<div class="post-metadata">

**Author:** ![phil.weir](https://sea1.discourse-cdn.com/flex021/user_avatar/forums.rocket.chat/phil.weir/32/4817_2.png) [@phil.weir](https://forums.rocket.chat/u/phil.weir)\
**Post date:** [August 10, 2023, 10:21am UTC](https://forums.rocket.chat/t/chromes-safe-browser-detects-a-site-deceptive-site-ahead/17265/4 "2023-08-10T10:21:25Z")

</div>

We are also having this problem, as of last night, and I have seen a few other recent posts on different forums:

- [Phishing Verdacht wegen Rocket.Chat - Google Search Central-Community](https://support.google.com/webmasters/thread/218366512/phishing-verdacht-wegen-rocket-chat?hl=de)
- [Chrome Flags Entire Website as Fishing - Google Search Central Community](https://support.google.com/webmasters/thread/220908336?hl=en-AU&sjid=2858819469634096580-EU)
- plus one more that on the same site (can’t post more than 2 as a new user)

Of course, some of these could be folks above.

I can’t see any consistent themes, but equally we are struggling with the lack of information from Google, so not clear if this is RocketChat-related or a coincidence. After checking for any unusual activity or other concerning signs (any “phishing” emails we have checked seem to be legitimate, normal chat notifications between regular users), we have requested a re-review, but we are also having to do stakeholder and client updates, so struggling with lack of any useful info from Google Site Safety. Mainly posting here to help highlight for future if there is indeed a pattern.
