Website labeled as phishing by Cloudflare

Hello, we are hosting our proxying our website through Cloudflare (more specifically running a redirector in Workers). As of yesterday, we received a notice (on our abuse contact) sent by Cloudflare (report: dbf80cb57ec1ba03). However, that was the only notice we received (as per docs, we should've had at least 24 hours to appeal), but no such e-mail was sent (checked Junk, even mail flow logs). We appealed the block and now it has been pending for a few hours. The reason is Logs or other evidence of abuse:  The URL uses evasion technique to hide the malicious content however all the worker does is http:// and https:// redirect to https://www... Other security websites (like Virus Total) don't list the site/domain as malicious. We also contacted abusereply@cloudflare.com at the same time with no reply. I don't understand what happened - how is it possible that a (probably) single report can take down a site without any space to appeal it ahead of time? The dashboard only lists http://domain.com/ as the malicious link (yes it includes http:// not even https://). So what is there left for us to do? This is causing some "reputation" damage because this "Suspected phishing" screen shows. I read about a few similar cases on Reddit. Any help would be greatly appreciated.
No description
1 Reply
Jan Hajek
Jan HajekOP3d ago
This has now been resolved, the removal was removed (again without any notice). Kind of confused about this entire process to be honest, I wish it was more transparent.

Did you find this page helpful?