gunal2

Yes, the reason is we changed the domain. We had to that, because people couldnt login the app they paid.

It's "infected". Like all the other services.

Google is doing the same business with VirusTotal.com. We're hosting malware as zipped files, and providing passwords to users. It's not possible to accidentally run the malware as user.

And the problem is not about this, we removed all the files and Google said you didnt. They're not saying you're not trustable website, they said you still have the files but we haven't.

Yes, for Google Oauth. I'll try again, but the domain is completely new. We just moved another domain.

They review the website and continued to marking as harmful. Why do you think this is misleading?

They didnt marked just the URLs, marked the domain as harmful.

As i mentioned before, i know hosting these files on our local server is not the best practice. There are other businesses doing this thing and Google is not marking them harmful. All files are zipped with a password, we provide the password to users.

Also, the filename is not a unique indicator the identify a file as malware. I can put the filename as "Google Chrome.exe" and that doesn't mean this is a malware.

The second issue is, we just changed the our domain name and when i try to add it to "Authorized redirect URIs" for Oauth getting this error: "The request has been classified as abusive and was not allowed to proceed". So, i have no idea about what is going on about my domain.

That's right. It's not the best practice, i totally agree with that. The problem is, i already removed the files but Google is not accepting that. And also they are doing the same business with VirusTotal, but its working really well.

They're just clicking the decline button, and its affecting our business.

We just moved our API domain to another domain. That's why it's working well now. I have the same opinion, maybe their system is cached but it's affecting our business. And if you get declined one time, they're not responding to you quickly again.

is it possible to bypass SSL forcing with sslstrip ?

You can create an account for free with limited access. If you worried about your personal information, you can use different name and surname

Can you please share with me which mail service are you using? And i tested login page, it looks ok. Can you create new user? Probably you are trying wrong password.