This has happened twice. First on 12/21/21 and again on 3/8/22. Both times, I had come from Google Search Console to inspect an error reported by Search Console. It was for different URLs on my site, https://the-good-plate.com.
The page that covered my page is a warning that the visitor is using an old version of Chrome and should click on the Update Chrome button. The download from December is a nasty trojan. JS: Trojan.Cryxos.7649, which displays an alarming notification message saying that the user's computer or web browser has been 'blocked' due to virus infection and that their personal details are 'being stolen'. The user is then directed to call a phone number for assistance in the 'removal process'. This is a version of a 'call support' scam.
Report from VirusTotal:
https://www.virustotal.com/gui/file/6081d05d37d36c0594fafd9ffe9fe8788a2c7fed356f5c014fadaf5752be826f
The JS: Trojan.Cryxos.7649 virus:
https://www.f-secure.com/v-descs/trojan_js_cryxos.shtml
Yesterday, in March, I did not click on the button because I knew it was malware. My concern is that one of my visitors is going to get this and not be as security aware as I am, download the virus, get infected and possibly have to spend a lot of money as a result, then come back to me and sue me.
In addition, should Google or other robots come by and have this happen to them, my site could be listed as dangerous and stop appearing in search results. No results, no visitors, no honey, no money.
I've attached screenshots from 12/21/21 and 3/8/22. I also have page source files but cannot upload them because txt file types are not allowed.