Flxpoint incident

Image URLs causing "Deceptive Website" messages to appear

Notice Resolved View vendor source →

Flxpoint experienced a notice incident on June 21, 2022, lasting 21h 23m. The incident has been resolved; the full update timeline is below.

Started
Jun 21, 2022, 02:17 AM UTC
Resolved
Jun 21, 2022, 11:41 PM UTC
Duration
21h 23m
Detected by Pingoru
Jun 21, 2022, 02:17 AM UTC

Update timeline

  1. identified Jun 21, 2022, 02:17 AM UTC

    Google recently flagged our image hosting bucket (AWS S3 Bucket) as "Deceptive". What we did : - We investigated the report - We made changes to address the report & reported the fix to Google (apparently could take days/weeks to confirm) Since this response may take a while, we also : - We stood up a pointer to this bucket `https://assets.flxpoint.com` - We adjusted all of our UIs to use the new URL - We started a process to retroactively update all of our images in Flxpoint to use the new URL Currently, channels that are using this direct image URL will be experiencing this message on any webpage that serves an image from this URL. Platforms like Shopify, BigCommerce, or any other platform that "cache" images, will not be experiencing this problem. Below we've provided some options to resolve this : - (Recommended) Edit existing image URLs and replace "dmx-assets-cloudfront.s3.amazonaws" with "assets.flxpoint" - (Alternative) Delete any image starting with "dmx-assets-cloudfront.s3.amazonaws" - (Alternative - If automating Product Content) Once our process completes, you can run an "Overwrite" job to get the latest URLs reflected - Wait until Google responds to us and lifts this flag We will update this incident when our process of replacing image URLs completes and/or if we hear more information from Google Search.

  2. resolved Jun 21, 2022, 11:41 PM UTC

    Google Search has lifted the "Deceptive website" messaging on our image s3 bucket. If you were previously receiving these errors, they should no longer be impacting you. We intend to release a post-mortem around this to explain what we found and what measures we have taken to prevent this from occurring again. From our investigation - we do not have any indication, evidence, or suspicion that any Flxpoint data was compromised from this. We apologize for the inconvenience and we will continue to learn from these incidents and improve our platform's resiliency.