LUCY

This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong.
===== Google Safe Browsing =====


There are several options to solve the problem with the "Deceptive site ahead" issue when the domain has been blacklisted by Google and to improve the Phishing Simulation Experience.
{{ deceptive_site.png?600 |}}

First of all, there's a procedure of verification and proving that the blacklisted domain is your property.
Go to:
https://www.google.com/webmasters/tools/security-issues
and press "Add property now"

{{ g_white01.png?400 |}}

{{ g_white02.png?400 |}}

Enter the URL of the property that you'd like to verify and press "Continue".

{{ g_white03.png?600 |}}

==== Domain name provider ====

Verify domain ownership via DNS record procedure interface would appear. From the dropdown menu choose your domain provider. Or select the option "Any DNS provider" for the TXT record whitelisting method.
Sign in to your domain name provider and add a TXT record as instructed.

{{ g_white04.png?600 |}}

{{ g_white05.png?600 |}}

For more info please refer to the [[https://support.google.com/webmasters/answer/9008080#domain_name_verification|Google Page]]

Please note, that domain verification method is the recommended one.
For more options please check the alternative methods available via URL prefix.

{{ g_white06.png?400 |}}

==== HTML file upload ====

Upload an HTML file to your site.

{{ g_white07.png?600 |}}

This method should be used only in case the others did not resolve the issue with the blacklisted domain.
In order to have a link for verification
<code>http://your-domain/file-provided-to-verify.html</code>
your admin Lucy domain must be changed to the target one.

**Warning!** During the procedure there would be no access to the default Lucy's admin path (for example, access.cloudsuperservice123.com)

  * Connect to your Lucy server and use the [[setup_script_tutorial|setup script]] to change the domain configuration:
<code>python /opt/phishing/current/tools/setup/setup.py</code>
  * Choose 1. Current Configuration.
  * Make sure to save somewhere the default domain so it can be restored in further steps.
  * Choose 5. Domain Configuration.
  * Enter the domain you would like to whitelist.
  * Choose 8. Logout Setup Menu.
  * Put the provided html file into the directory
<code>/opt/phishing/current/web/</code>
by pasting it or creating manually a full copy of the file.
  * At this point confirm successful upload by visiting the link in your browser.
  * And press Verify in the Google Search Console.
  * After receiving the success confirmation message the domain can be restored to the default one.
{{ g_wl_08.png?600 |}}

For more info please refer to the [[https://support.google.com/webmasters/answer/9008080#html_verification|Google Page]]


==== HTML tag ====

Add a meta tag to your site's home page.

{{ g_white08.png?600 |}}

For more info please refer to the [[https://support.google.com/webmasters/answer/9008080#meta_tag_verification|Google Page]]

==== Google Analytics ====

Use your Google Analytics account.

{{ g_white09.png?600 |}}

For more info please refer to the [[https://support.google.com/webmasters/answer/9008080#google_analytics_verification|Google Page]]

==== Google Tag Manager ====

Use your Google Tag Manager account.

{{ g_white10.png?600 |}}

For more info please refer to the [[https://support.google.com/webmasters/answer/9008080#meta_tag_verification|Google Page]]

===== Manage Security Issues =====


Now the target domain should be added to your property list here:

https://www.google.com/webmasters/tools/security-issues


Otherwise, it can be reached via page

https://search.google.com/search-console/welcome

Enter the target domain and press Continue.
The notification should appear if the ownership was verified previously for the domain.
{{ g_wl_09.png?600 |}}

Here you can manage the issues with it, resolving security problems.
Find the issue, request a review, and write a reason, that the site does not contain any harmful content.
{{ g_wl_10.png?600 |}}
Please note, that the process might take a few days to finish. Usually, it's about 48 hours.
After it's finished the notification email should be received containing the result of a request.