Help HN: Google just blocked my site as deceptive site

I run a website called Uploader window (www.uploader.win) that helps users to add an upload widget to their own apps or websites.

This morning I got a message from google that my site has been blocked for being Deceptive and it has listed my homepage as the deceptive URL. Anybody who will open the site gets a big red screen with a warning.

I've checked the source code by hand and everything I could check and I can't find any reason for hack or any security issues.

The only possible reason I can think off is we have a demo on our homepage which allows users to upload test files to try out the uploader and we offer a 20MB test space to help users during development. All test files are deleted after 24 hours. I have also disabled both these features since. But Google didn't say if this was the cause.

I've submitted a review to Google but not sure how long it will take.

We have a paying customers and all sites which have our script are now showing this warning too.

I am feeling super helpless and super scared how this is going to affect them.

Do you know of any way I can expidite the review? Any thing you can suggest to help me?

I don't really know any way around other than that we can report the incorrect phishing warning here:

https://safebrowsing.google.com/safebrowsing/report_error/?u...

Is Search Console giving any useful info?

FYI your domain seems to be blacklisted by Firefox, McAfee, Sophos among others [0]

[0] https://www.virustotal.com/gui/url/e75b77237f60332ef78b2399c...

This is probably the root cause. e.g. Mozilla shut down the "firefox send" service because of their inability to stop inadvertently hosting malware

I'd report it as incorrect, but I can't even ignore the warning (Firefox, clicking proceed anyway just pops up an additional 'deceptive site' banner that follows me even after navigation away /shrug) - so I can't really justifiabally report it sight unseen.

Where does the upload go when your customers use it on their site though? Maybe what's deceptive is that if HN shows an upload area in an iframe or whatever, and I upload something, I expect that I'm giving it to HN, but really it's gone straight to you at Uploader.win?

(Fwiw I also think uploader.win is not a great name, your search result looks like it's a good tool, but the name sounds sort of scammy, like the kind of thing you'd get if you searched 'free download exe' or something.)