My google safe browsing data not found the http://online-xp-antivir.com as malware url

[Jitendra]

Hi..

I am updating my google safe browsing data on every day.
Today I have have checked data for the http://online-xp-antivir.com
url and found that its not malware as well as not phishing url in my
google safe browsing database.

But When I go to google safe browsing test tool url (http://
www.google.com/safebrowsing/diagnostic?site=online-xp-antivir.com), it
is declared it that there is malware on site..

Can anyone please inform me why this happen? Also can anyone please
check that on your google safe browsing database that it is found in
your database as malware URL.


Waiting for quick reply.

Thanks,
Jitendra

[Sam C]

I can confirm its not in the database as well (http://
gsbtool.beaver6813.com) tested on there.
Perhaps they run on different databases (slightly)?

--Sam

On Mar 8, 9:25 am, Jitendra <jitu.rathodld...@gmail.com> wrote:
> Hi..
>
> I am updating my google safe browsing data on every day.

> Today I have have checked data for thehttp://online-xp-antivir.com

> url and found that its not malware as well as not phishing url in my
> google safe browsing database.
>

> But When I go to google safe browsing test tool url (http://www.google.com/safebrowsing/diagnostic?site=online-xp-antivir.com), it

[Garrett Casto]

Our database has this url, it's in malware chunk 33489 which was published last Friday. Do either of you have this chunk?

--
You received this message because you are subscribed to the Google Groups "Google Safe Browsing API" group.
To post to this group, send email to google-safe-...@googlegroups.com.
To unsubscribe from this group, send email to google-safe-browsi...@googlegroups.com.
For more options, visit this group at http://groups.google.com/group/google-safe-browsing-api?hl=en.

[Sam Cleaver]

Hi Garrett,

On the site I mentioned it shows the range of chunks it has and includes 33489. I believe my client is working correctly, can you confirm its definately in there? You can check all my databases stats etc on http://gsbtool.Beaver6813.com

Let me know if you need any more info,

Sam

-Sent from my HTC Desire

[Garrett Casto]

It's in the database that our frontends serve from, and my version of Chrome is blocking on that site. I was poking around on your site and realized that the hash of this url (243b3f31) shows up as matching a hostkey in chunk 33489 though not matching a url. So possibly there is some issue there. Jitendra, what implementation are you using?  If this is an issue in Chrome or Firefox I would very much like to know.

Garrett

[Sam Cleaver]

Bingo, found the problem, you were right, the hash it was in the database! On my implementation it was trimming the received full hash response at the end (to remove any extra line feeds etc). Because the end of the full hash was 00 it recognised the binary as empty space and trimmed it resulting in a hash mismatch. Obviously a bug that I'll be fixing swiftly in the phpGSB library. Jitendra perhaps a similar problem?

--Sam

[Jitendra]

Hi Sam,

Yes, I am using your phpGSB library. That's why this problem comes..
Can you please update the fixing on your google codes.. I am waiting
your reply.

And thanks for your help same and google customer care.

Thanks,
Jitendra

[Sam C]

I've now updated the library on http://code.google.com/p/phpgsb/downloads/list
as release 0.2.1, you'll need to run the update file as well as it
also adds some indexes to the database to make lookups faster. If you
find any more issues then just post on the issues section on the
google code site. Thanks again Garrett for your assistance with the
debugging.

--Sam