Users accessing Xperience by Kentico administration interfaces at *.xperience-sites.com/admin/* were shown a "Dangerous site" warning in browsers relying on Google Safe Browsing (e.g. Chrome, Safari, Firefox). Because all subdomains of xperience-sites.com share a single domain-level safety score, the flag affected every customer hosted on the domain.
Our investigation found no social engineering or deceptive content — as defined by Google's social engineering guidelines — on any customer site. A third-party dependency was injecting an advertisement into the browser console, which we identified as a likely contributor to the flag. We applied two mitigations: removing the console advertisement injected by the dependency, and updating the admin login page to clearly identify the instance as managed by Kentico. These changes are documented in our changelog.
Following both changes, the sites were removed from Google Safe Browsing's blocklist.