user warnings for phishing and malware on requested hashes