My Website Has Been Falsely Flagged as a Phishing Site

What is the name of the domain?

com

What is the issue you’re encountering

My website has been mistakenly flagged as a phishing site, and I need urgent assistance to resolve this issue.

What steps have you taken to resolve the issue?

I have already submitted an appeal through the Cloudflare Abuse Report form, but this form seems to be designed for reporting abuse rather than appealing false positives.
My hosting provider received Cloudflare’s forwarded report and has already responded, confirming that our website does not contain phishing content.
However, I never received any phishing complaints before Cloudflare’s classification, which suggests this was triggered by an automated system or a false report.
I have followed all the necessary steps but have not received any resolution yet. Is there a proper process I should follow to appeal this decision?

Ticket Number: #18505451
Abuse Report ID: 200e1e7504a4e92c

Any guidance or assistance from the Cloudflare team would be greatly appreciated. Thank you!

If this is just a miscategorization (ie you’ve not received any incidence notice from the Cloudflare Trust & Saftey team), then just submit a re-categorization request here: https://radar.cloudflare.com/domains/feedback

If you’ve done this already, please be patient and allow some time for your feedback to be reviewed and approved. (And if you could share your domain, others could do the same to… perhaps… up the signals.)

1 Like

Thank you for your response! I have checked Cloudflare Radar, and my website viva-awa.com is not categorized as Phishing. However, my website is still blocked with a phishing warning in both the Cloudflare dashboard and the frontend.

I have already submitted a re-categorization request through Cloudflare Radar.
I have also contacted my hosting provider, and they confirmed that there are no phishing-related issues.
Google Safe Browsing does not flag my site as malicious either.
It seems that the phishing classification is coming from Cloudflare’s Trust & Safety system directly, rather than the Radar categorization. Do you know if there’s another way to escalate this issue, or should I continue following up on my support ticket (#18505451)?

Thanks again for your help!

Sucuri SiteCheck has flagged the domain and says: “This specific URL was identified in malicious campaigns to disseminate malware. Reason: blackhat seo forum spam”

See: https://sitecheck.sucuri.net/results/https/www.viva-awa.com

3 Likes

Can I contact Sucuri to remove the flag?

I can’t speak for Sucuri, unfortunately :smiley:

I was just trying to tell you that Cloudflare is not the only one seeing problems with your site and that your site may not be as clean as you and your hosting provider may want to believe.

1 Like

Greetings,

Thank you for asking.

By visiting your Website I can reproduce and see the same error as follows:

May I ask if you have checked your mailbox for any email from Abuse Cloudflare?
Furthermore, did you followed the instructions on your Dashboard and selected a Request review → https://dash.cloudflare.com/?to=/:account/:zone/?

The button should be shown as:

Screenshot 2025-01-08 at 2.10.06 PM

Nevertheless, only the team at the address [email protected] you already contacted could help you in this case. I am afraid the Cloudflare community cannot help here. You would need to discuss this with them. Sorry for the issue, the Community does not have access to see any Trust & Safety cases, so we cannot assist further.

The Trust & Safety team has to get back to you. You will have to wait your turn in the T&S queue until the team review your case/issue (days, or weeks).

When you Log into your Cloudflare dashboard you should see a message providing more details on the reason behind this flagging and how to request a review → https://dash.cloudflare.com/?to=/:account/:zone/.

Example:

I have sent an email to [email protected] and also submitted feedback at https://dash.cloudflare.com/?to=/:account/:zone/, but I have not received a response.

1 Like

This is the correct way. Great!

I am afraid Community cannot confirm any ETA. Might take some days, or few weeks if there’s some delay. Unfortunately I don’t know about any ETA nor response window on such requests. Patience :crossed_fingers:

1 Like

This topic was automatically closed 2 days after the last reply. New replies are no longer allowed.