Small and medium business | Business Central, N...

an alert from Google saying that it’s a phishing site.

(0) Share

Report

Posted on by TKC

171

Looks like when we visit our BC site in Chrome we are getting an alert from Google saying that it’s a phishing site. We were alerted to it this evening via email from Google. Not sure what’s up but wanted to see what you thought and if we needed to try to take any action.

any ideas?

All responses (5)

Answers (0)

Sort by

steveendow 2,281 on at

Like (0)

Report
Copy link

Link copied!

You are receiving an *email* from Google saying that the Business Central web site is a phishing site? Not a warning in your browser? That seems odd, unless that is some feature / service I'm unaware of

Can you post a screen shot of the email and any other alerts? (with any company info redacted)
TKC 171 on at

Like (0)

Report
Copy link

Link copied!
steveendow 2,281 on at

Like (0)

Report
Copy link

Link copied!

Thanks for the image. Assuming klc.org is your organization, it looks like you are accessing an 'alias' or DNS "CName" entry to redirect you to Business Central, likely for convenience. That is not the standard Business Central URL, and I assume that the browser is somehow detecting that you are being redirected, which it considers a security risk.

The standard URL to access Business Central is:

businesscentral.dynamics.com/

I would recommend bookmarking this official Business Central URL to access it directly, but you should speak with your IT department to understand why the bc.klc.org DNS entry was setup and let them know about the browser error. Your IT infrastructure could be more complex, with VPNs or proxies, so there may be a deeper explanation as to why that DNS entry was setup.
Suggested answer

Marco Mels Microsoft Employee on at

Like (0)

Report
Copy link

Link copied!

Hello,

This is indeed a hot topic and not only related to our Dynamics 365 Business Central, other SaaS hosters face similar incidents. See for instance:

gomox.medium.com/google-safe-browsing-can-kill-your-startup-7d73c474b98d

All we can do is to ask you to follow the process here:

support.google.com/.../99020

If you own a site marked as dangerous or deceptive:

Follow the instructions to fix the problem and request a review via developers.google.com/.../request_review

The issue is not related to Dynamics 365 Business Central but more or less to the domain setup. The first article, not generated by Microsoft or Microsoft support, provides a few suggestion you can do to deal with this issue. There may be other reports from other entrepreneurs that found other ways to prevent this from happening.

Most likely, changing logo’s or changing alternate ways to logon to Dynamics 365 Business Central via Azure AD authentication in stead of NavUserPassword may not prevent the issue either. Apart from that, the few reports that we received related to similar issues, all were about partners / customers using NavUserPassword.

It may still be worthwhile exploring Azure AD Authentication, but there are no guarantees that this will resolve it for you.

Hope it helps you somehow to get rid of this unwanted warning from Google as it is not a nice experience you do not want to see when it is a false positive.

Thanks.
Tabrez Ajaz 793 on at

Like (0)

Report
Copy link

Link copied!

Hi,

If this is On-Premises, add SSL to your Web Client from IIS, to add a new binding. Go to your "Dynamics 365 Business Central Web Client" website and add bindings for HTTPS and add a public certificate to the site.

And also do the required changes on the Server Instance level, by adding a thumbprint to Server Instance.