Fake psihing report, no response from cloudflare

What is the name of the domain?

supermiu.me and win32subsystem.live/supermium

What is the issue you’re encountering

Fake psihing report

What are the steps to reproduce the issue?

Hello cloudflare team.
May i please own some clarification regarding a recent incident where our domains were falsely reported as phishing from a report that is based on inaccurate information, and i would also like to understand why such reports are allowed to pass through your system despite sending an email to your support team? We, the site maintainers did reply and have not received a response. (I attached the report).

In case you are not familiar with Supermium, it is an open-source browser designed to work on older systems, starting from Windows XP and continuing onward. You can find our project page here: GitHub - win32ss/supermium: Chromium fork for Windows XP/2003 and up.
Here is the source code for our installer which we typically use. We also provide the browser binaries into a plain ZIP file: GitHub - win32ss/supermium-installer: Supermium web browser installer
Additionally, I would like to highlight that…

  1. Supermium has been recognized by Microsoft, as evidenced by our mention in the December 2024 Windows Server 2008 SP2 KB5048710 monthly rollup update changelog. This indicates that our project has been reviewed and utilized by Microsoft and its developers: December 10, 2024—KB5048710 (Monthly Rollup) - Microsoft Support (microsoft misspelled supermium as supramium).
  2. We’ve also been recognized by various news sources such as The Register, Michael MJD, and Windows Report.
  3. The creator recently registered ‘Supermium’ as a Canadian company, 16829406 Canada Inc
  4. NeseOS self-proclaims to be founded by Microsoft; however, it is actually a non-existent company. The individuals behind it create thousands of accounts, submit random reports, and set up various websites using free hosting services, all while harassing anyone who expresses disapproval and bragging publicly: Imgur: The magic of the Internet

If this is not sufficient evidence that our browser is safe to use and it is quite popular, i’m not sure what else would be convincing cloudflare…

Screenshot of the error

1 Like

reply to my own post, some transparency regarding my link, supermiu.me
This link is a page rule that forwards to the official website when the status code is 302. I do not have any DNS configuration beyond what the dashboard offered me to do.

image

The administrator behind our domain win32subsystem.live/supermium has once again received an obviously fake complaint from the Cloudflare offcials.
Cloudflare team, I seriously do not understand why every random complaint needs to be accepted immediately, nor do I understand how our website is considered phishing, is somebody even responding?

I am sorry to hear you’ve experienced such issue and feedback reply from the automation system.

I understand that it is frustrating to see your abuse report rejected.

Kindly, I’d suggest you to reach out to the domain registrar Porkbun instead with this case since Cloudflare only provides service and I am afraid cannot take an action since domain not registered within Cloudflare Registrar, nor Cloudflare is providing hosting (only DNS and related service(s)).

Registrar: Porkbun LLC

Unfortunately, I have knowledge nor feedback how the internal Cloudflare Abuse system works, therefrom the Community could not help here further since this has to be clearified and pushed further, if true, with the T&S team.

p.s. Try to report this from your legal domain email, not private Gmail.

By visiting your Website I can reproduce and see the same error as follows:

May I ask if you have checked your mailbox for any email from Abuse Cloudflare?
Furthermore, did you followed the instructions on your Dashboard and selected a Request review → https://dash.cloudflare.com/?to=/:account/:zone/?

The button should be shown as:

Screenshot 2025-01-08 at 2.10.06 PM

Nevertheless, only the team at the address [email protected] you already contacted could help you in this case. I am afraid the Cloudflare community cannot help here. You would need to discuss this with them. Sorry for the issue, the Community does not have access to see any Trust & Safety cases, so we cannot assist further.

The Trust & Safety team has to get back to you. You will have to wait your turn in the T&S queue until the team review your case/issue (days, or weeks).

When you Log into your Cloudflare dashboard you should see a message providing more details on the reason behind this flagging and how to request a review → https://dash.cloudflare.com/?to=/:account/:zone/.

Example:

You’re redirecting it to where? Might look suspicious to the team as well.

That’s about it, nothing suspicious nor malicious.

  1. Yes, I do check any emails I receive from Cloudflare periodically.
  2. No, I do not have the ‘Request Review’ button on the dashboard, nor have I received any further messages.
  3. The whole point of this thread is that the team at [email protected] won’t simply respond to my messages.
  4. We reached out to the Porkbun registrar in the past, and they acknowledged that our domain is safe.
    If neither the Trust & Safety team nor the community can help, what can I do? consider ditching Cloudflare?