Questions tagged [safe-browsing-api]

The Safe Browsing APIs (v4) let your client applications check URLs against Google's constantly updated lists of unsafe web resources. To determine if a URL is on any of the Safe Browsing lists, clients can send URLs to the Google Safe Browsing server to check their status or download encrypted versions of the Safe Browsing lists for local, client-side checks of URLs.

What are the Safe Browsing APIs?

The Safe Browsing APIs (v4) let your client applications check URLs against Google's constantly updated lists of unsafe web resources. Examples of unsafe web resources are social engineering sites (phishing and deceptive sites) and sites that host malware or unwanted software. Any URL found on a Safe Browsing list is considered unsafe.

To determine if a URL is on any of the Safe Browsing lists, clients can use either the Lookup API (v4) or the Update API (v4).

Overview

23 questions
7
votes
1 answer

How to fix the "Invalid JSON payload received. Unknown name" error

I try to get a proper response from the Google Safe Browsing API v4. Although I get the error "Invalid JSON payload received. Unknown name". I have used a payload based on the payload example mentioned at…
ZOMDir
  • 341
  • 1
  • 2
  • 6
3
votes
1 answer

Google web-risk API and SafeBrowsing api returns safe for phishing site

Following instructions here, the following code appears to return good results on the example sites, but on an actual phishing site (https://www.clicktrackingsall.com/a.php) it returns empty: const axios = require('axios'); const apikey =…
orirab
  • 2,915
  • 1
  • 24
  • 48
2
votes
0 answers

Why is Google's Safe Browsing API not marking my URL as a threat?

To prevent users from posting links to phishing scams on our Discord server, I have decided to use the Google Safe Browsing API. Google Transparency Report (which to my knowledge uses the Safe Browsing API) says that the site: contains harmful…
Jan Schultke
  • 17,446
  • 6
  • 47
  • 96
2
votes
2 answers

google Safebrowsing api v4 always returns empty response

I am using safe browsing api v4 in my android code.I am using Asynctask and request safebrowsing api using httpurlconnection.The response is always empty. I have tested my connection using test url http://malware.testing.google.test/testing/malware/…
1
vote
1 answer

Error: 403 Client Error: Forbidden for url

I'm writing a program that queries Google Safe Browsing for certain urls. I am getting the following error: 'Error: 403 Client Error: Forbidden for url: https://safebrowsing.googleapis.com/v4/threatMatches:find?key=[API_KEY]' import requests, json,…
1
vote
0 answers

Request contains an invalid argument. while using Safe Browsing Api with Rails 7

I want to build this simple project where users can check url safety using Safe Browsing API but It doesn't work correctly even though I've tried multiple ways but no success. This's my controller method below. def check_url if…
1
vote
0 answers

Google "Safe Browsing Lookup API" returns empty array

I'm trying validate url for comment form. Then I thought ”Safe Browsing Lookup API” looked good. However, the following code only returns an empty array in $result. What can I do to improve this code? code:
chagean
  • 11
  • 1
1
vote
1 answer

Safebrowsing API returns 'Invalid JSON payload received'

I'm using Safe browsing API to check some URLs from my database, but the request gives me this result: data { "error": { "code": 400, "message": "Invalid JSON payload received. Unknown name \"threatInfo[threatTypes][0]\": Cannot bind query…
J. Gandra
  • 553
  • 6
  • 12
1
vote
0 answers

PHP safe-browsing return empty string

this PHP file is for knowing if a site is a safe or not thanks to safe-browsing. $curl = curl_init(); $certificate="C:\cacert.pem"; curl_setopt_array($curl, array( CURLOPT_URL =>…
1
vote
0 answers

Why browsers block specific URL via safebrowsing but safebrowsing API don't say URL is dangerous?

Currently I implementing google safe browsing on my web service to filter dangerous URL. When I was testing some specific malicious URL, I find out that browsers which using fullHashes:find API method detects some specific URL as dangerous, but…
al_bl
  • 11
  • 1
1
vote
0 answers

getting blank response from Google safe browsing api

I am using postman to send a post request to the google safe browsing api,but I am getting a blank response in return with status 200 ok https://safebrowsing.googleapis.com/v4/threatMatches:find?key=AIzaSyCG0_ltenJACSir1moT_4bcK4-ROCq4myc { …
0
votes
0 answers

Why does Google Safe Browsing remove its URL? then some of them gets re-added but why?

Why does Google Safe Browsing remove its URL? then some of them gets re-added but why? I know there will be some false positives collected in the first place, but if I use the python library (https://github.com/afilipovich/gglsbl) to sync local…
0
votes
1 answer

Safebrowsing API upload hash to check for suspicious software

I'm trying to send a hash as a payload for the Safebrowsing API to detect if the file is suspicious/malicious, but i'm having trouble sending the correct payload apparently. My payload: curl --location --request POST…
Phillip
  • 49
  • 1
  • 9
0
votes
1 answer

Data sent by firefox to google's safebrowsing APIs

I'm trying to debug what data is sent by firefox to google's safe browsing APIs. So far, I was able to tap into the request sent, which looks something…
0
votes
1 answer

Firefox: WebRequest API vs Deceptive Page

I'm developing a Firefox add-on which does block the malicious URLs. The problem is that sometimes Firefox render its own deceptive warning page and sometime it allows the extension to render its own warning page. How can I bypass the deceptive page…
1
2