I get a pishing warning even though I turned off the CloudFlare proxy setting

What is the name of the domain?

bilimvegelecek.com.tr

What is the error number?

902cb784bb31e346

What is the error message?

Suspected Phishing This website has been reported for potential phishing. Phishing is when a site attempts to steal sensitive information by falsely presenting as a safe source.

What is the issue you’re encountering

gives pishing warning

What steps have you taken to resolve the issue?

we went back to the backup we knew was working fine.
still kept getting the pishing warning.
I turned off CF proxy protection.
tested with different browsers.
still keep getting the warning.

What should I do?

Was the site working with SSL prior to adding it to Cloudflare?

Yes

What is the current SSL/TLS setting?

Off

Screenshot of the error

I am sorry to say, however currently since Pause or unproxied, I’ve got even worse from my ESET Nod32 and Malwarebytes and you should consider cross-checking your files with your hosting provider for any malicious code or malware and remove it.

May I ask if you’ve checked your mailbox for any email from Abuse Cloudflare? :thinking:

Did you followed the steps on your Dashboard and selected a Request review?

Screenshot 2025-01-08 at 2.10.06 PM

Only the team at the address you already contacted could help you in this case.
I am afraid the Cloudflare community cannot help here. You would need to discuss this with them.

Sorry for the issue, the Community does not have access to see any Trust & Safety cases, so we cannot assist further.

The Trust & Safety team has to get back to you. You will have to wait your turn in the T&S queue until the team review your case/issue (days, or a week).

When you Log into your Cloudflare dashboard you should see a message providing more details on the reason behind this flagging and how to request a review → https://dash.cloudflare.com/?to=/:account/:zone/.

Example:

Since it’s WordPress, scan it with Malcare, Sucuri and Wordfence plugins:

https://www.hostpapa.com/blog/security/what-to-do-if-your-wordpress-website-was-hacked/

https://www.getastra.com/blog/911/how-to-remove-the-backdoor-php-apiword-malware-from-your-wordpress-website/

This topic was automatically closed 2 days after the last reply. New replies are no longer allowed.