Repository navigation
[Bug]: Significant increase in False Positives (July 2026) #167
Description
Activity
DO NOT DOWNLOAD
fix_parser_logic zip
I can't seem to flag a reply, but this random ZIP file from a brand-new account is incredibly suspicious.
If it's a ligitimate script, upload it to GitHub and share a link to the GitHub page.
Reacted by Alex 'Freedom' HainesDeleted the comment, its an AI trying to get you to download a infected zip file.
Reacted by Owen C and Alex 'Freedom' HainesWe have the same issue with the following urls:
We've just had box.com blocked due to Domain Squatting as it is close to xbox.com
Just adding in for info:
• googleusercontent vs google getting flagged when opening PDF attachments in gmail.
• had britishgas get blocked as well.We've had a few hits for www.googleadservices.com as well now.
Required confirmations before submitting
Issue Description
There's been an increase this week in Check detecting false positives.
On 2026-07-06 we had "https://id.trimble.com/": Form action "https://id.trimble.com" does not contain login.microsoftonline.com.
Today (2026-07-08) we had the following:
Extension Version
1.2.0
Rules Version
1.2.4
Relevant Logs / Stack Trace