# Suspicious link by Gmail

**URL:** https://meta.discourse.org/t/suspicious-link-by-gmail/108064
**Category:** Support
**Created:** [January 31, 2019, 10:15pm UTC](https://meta.discourse.org/t/suspicious-link-by-gmail/108064 "2019-01-31T22:15:49Z")
**Posts on this page:** 10
**Page:** 1

<div class="post-metadata">

### Author: ![Lure](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/lure/32/130462_2.png) [@Lure](https://meta.discourse.org/u/Lure)
#### Post date: [January 31, 2019, 10:15pm UTC](https://meta.discourse.org/t/suspicious-link-by-gmail/108064/1 "2019-01-31T22:15:49Z")

</div>

Some of the users complained that they get **Suspicious link** warning in Gmail when they click links to our forum. I have also noticed, that even `meta.discourse.org` link in upgrade notice is considered as suspicious.

 ![31](https://global.discourse-cdn.com/meta/original/3X/e/8/e8302b2c9142b335f8f28fa1b04b08b080b8deec.png)

Any idea how to fix that?

---

<div class="post-metadata">

### Author: ![Gulshan\_Kumar](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/gulshan_kumar/32/119562_2.png) [@Gulshan\_Kumar](https://meta.discourse.org/u/Gulshan_Kumar)
#### Post date: [January 31, 2019, 10:30pm UTC](https://meta.discourse.org/t/suspicious-link-by-gmail/108064/2 "2019-01-31T22:30:17Z")

</div>

> [@Lure](#):
>
> Any idea how to fix that?

Some e-mail services uses tracking link which causes this problem. In fact, once I received search console warning also due to similar issue.

I would suggest use reliable e-mail services. In my personal experience, I have found these two very good.

- AWS SES
- Mailgun

I don’t recommend

- E\*\*\*\*\*\*\*

I hope this helps.

Thanks & Regards,  
Gulshan

---

<div class="post-metadata">

### Author: ![Lure](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/lure/32/130462_2.png) [@Lure](https://meta.discourse.org/u/Lure)
#### Post date: [January 31, 2019, 11:01pm UTC](https://meta.discourse.org/t/suspicious-link-by-gmail/108064/3 "2019-01-31T23:01:59Z")

</div>

I am actually using MailGun and I do not see any tracking links in those emails. Strange?

---

<div class="post-metadata">

### Author: ![supermathie](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/supermathie/32/507518_2.png) [@supermathie](https://meta.discourse.org/u/supermathie)
#### Post date: [January 31, 2019, 11:09pm UTC](https://meta.discourse.org/t/suspicious-link-by-gmail/108064/4 "2019-01-31T23:09:08Z")

</div>

All else being equal I would hazard a guess this is an overreaching warning implemented by gmail.

Are these users using [gmail.com](http://gmail.com) addresses or gsuite? This information may apply:

> **[Advanced phishing and malware protection  |  Gmail  |  Google Workspace Help](https://knowledge.workspace.google.com/admin/gmail/advanced/advanced-phishing-and-malware-protection?hl=en&visit_id=639158972439235766-1748241900&rd=2)**

---

<div class="post-metadata">

### Author: ![codinghorror](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/codinghorror/32/110067_2.png) [@codinghorror](https://meta.discourse.org/u/codinghorror)
#### Post date: [February 1, 2019, 2:19am UTC](https://meta.discourse.org/t/suspicious-link-by-gmail/108064/5 "2019-02-01T02:19:30Z")

</div>

> [@Lure](#):
>
> I am actually using MailGun and I do not see any tracking links in those emails. Strange?

You aren’t viewing the source, some mail providers rewrite all links in emails to go through their private link tracker. This is not related to Discourse in any way cc @supermathie

---

<div class="post-metadata">

### Author: ![itsbhanusharma](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/itsbhanusharma/32/180717_2.png) [@itsbhanusharma](https://meta.discourse.org/u/itsbhanusharma)
#### Post date: [February 1, 2019, 6:13am UTC](https://meta.discourse.org/t/suspicious-link-by-gmail/108064/6 "2019-02-01T06:13:34Z")

</div>

I can confirm this is 1000% related to gmail.

I have evidence for it as well..

A few days ago, I was testing email delivery. While most people’s gmail received the test mail in the updates section of gmail,

Some of those were sent to spam with suspicious email warning highlighted on the top of it saying “emails like this are used for phishing attacks, proceed with caution”

It was the same discourse, same email (mailgun) and same mail (test email from admin) and still gmail manages to handle them differently from user to user basis. I don’t find any pattern either because there were mixed results for either registered or unregistered users.

---

<div class="post-metadata">

### Author: ![bartv](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/bartv/32/130052_2.png) [@bartv](https://meta.discourse.org/u/bartv)
#### Post date: [February 1, 2019, 7:16am UTC](https://meta.discourse.org/t/suspicious-link-by-gmail/108064/7 "2019-02-01T07:16:50Z")

</div>

We have the same issue on Mailjet - they suspect it may have something to do with the HTML format but they’re still looking in to it. I’ll follow up here when I have more information.

---

<div class="post-metadata">

### Author: ![Aleksandrs\_Vilums](https://avatars.discourse-cdn.com/v4/letter/a/c68b51/32.png) [@Aleksandrs\_Vilums](https://meta.discourse.org/u/Aleksandrs_Vilums)
#### Post date: [February 1, 2019, 8:25am UTC](https://meta.discourse.org/t/suspicious-link-by-gmail/108064/8 "2019-02-01T08:25:50Z")

</div>

It looks like this is a global issue! In [mailgen.com](http://mailgen.com) one of our customers also seen one of our link suspicious.

---

<div class="post-metadata">

### Author: ![Mittineague](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/mittineague/32/114259_2.png) [@Mittineague](https://meta.discourse.org/u/Mittineague)
#### Post date: [February 1, 2019, 9:01am UTC](https://meta.discourse.org/t/suspicious-link-by-gmail/108064/9 "2019-02-01T09:01:34Z")

</div>

It seems it would be an aggressive filter, but do you think it might be because of a “your site” \<from\> with a meta discourse link in the body?

I’m not familiar with gmail accounts, but if the above is the reason might there be a setting (eg. whitelist?) that would help?

---

<div class="post-metadata">

### Author: ![Pandabear](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/pandabear/32/207556_2.png) [@Pandabear](https://meta.discourse.org/u/Pandabear)
#### Post date: [July 4, 2021, 4:02pm UTC](https://meta.discourse.org/t/suspicious-link-by-gmail/108064/10 "2021-07-04T16:02:38Z")

</div>

On my new forum [https://foro.tecno01.com/](https://foro.tecno01.com/) , when users register via gmail, and have to verify their account, they get the following message

 ![gmail](https://global.discourse-cdn.com/meta/original/3X/7/1/713172c115eb2362415a764a3d0fe5d706d1d86f.jpeg)

Suspicious link  
this link leads to an untrusted site. are you sure you want to proceed to [foro.tecno01.com](http://foro.tecno01.com)?  
Any helps, thanks
