Magento Question posted in
The official documentation can be found here.

My site flagged as unsafe by Smartscreen only in Microsoft Edge – Magento

My Magento 1.9 webshop is marked as unsafe (phishing which is not true) in Microsoft Edge, if switch to IE and run Smart Screen security check it says all safe.
And strangely only on one of my computers and therefore didn’t bother much but also a customer complained about it today.

Anyone experienced this before and have a solution? Is there a way to check why a site is marked as unsafe by smartscreen?

Tags:

3

Answers


  1. 0

    Based on my searching results, Below information may helpful to you.

    Q. If I am a website owner, how do I correct a warning on my legitimate site?

    A. You can immediately submit a request for a correction. Windows Defender SmartScreen has a built-in, web-based feedback system in place to help customers and website owners report any potential false warnings as quickly as possible. In Windows Internet Explorer, from a red warning, click More information then Report that this site contains no threats. This will take you to a feedback page where you can indicate you are a site owner or representative. Follow the instructions and provide the information on this site to submit a site for review…

    Reference:

    Resolving “This website has been reported as unsafe” (Windows Defender SmartScreen)

    Login or Signup to reply.
  2. 0

    Q.
    If I am a website owner, what can I do to help minimize the chance of my website being flagged by Windows Defender SmartScreen?

    A.
    There are several things you can do that can help minimize the chance of your site being flagged as suspicious. Think of these as best practices or optimal website design ethics.

    If you ask users for personal information, use HTTPS with a valid, unexpired server certificate issued by a trusted certification authority.

    Make sure that your webpage doesn’t expose any cross-site scripting (XSS) vulnerabilities. Protect your site by using anti-cross-site scripting functions such as those provided by the Microsoft Anti-Cross Site Scripting library.

    Use the fully-qualified domain name rather than an IP-literal address. (This means a URL should look like “microsoft.com” and not “207.46.19.30.”)

    Don’t encode or tunnel your URLs unnecessarily. If you don’t know what this means, you probably aren’t doing it.

    If you post external or third-party hosted content, make sure that the content is secure and from a known and trusted source.

    Reference:

    Windows Defender SmartScreen Frequently Asked Questions

    Login or Signup to reply.
  3. 0

    In MS Edge browser there’s an option to "report file as safe". After clicking it – select the "I’m a website owner" option and fill the false-positive form.

    enter image description here

    Login or Signup to reply.
Please signup or login to give your own answer.

Back To Top
Search