Dear Bubble Support Team, I am reaching out regarding a critical issue affecting my Bubble application hosted at https://softplanner.app.br. My app is being flagged as “Phishing” by multiple security vendors including Microsoft Defender SmartScreen, AVG/Avast, Norton Safe Web, and Cloudflare itself. This is causing users to be blocked from accessing the platform with a phishing warning page. After investigation, I identified that the root cause appears to be Cloudflare’s domain categorization, which classified my domain as “Phishing” and “CIPA Filter”. Since Bubble uses Cloudflare as its CDN and infrastructure provider, this miscategorization is being propagated to other security vendors. I have already taken the following steps: Submitted a recategorization request via Cloudflare Radar (changed to “Personal Finance” and “Economy & Finance”) Reported false positives to Microsoft SmartScreen, AVG, Norton, Trend Micro, and ESET Verified the domain is clean on Google Safe Browsing and 70+ blacklists Confirmed the domain has no malicious content, valid HTTPS, and no external redirects The Cloudflare URL Scanner shows a “Malicious” verdict and a /cdn-cgi/phish-bypass URL in the page history, which appears to be generated by Cloudflare’s own phishing interstitial page. Since this infrastructure is managed by Bubble, I am requesting your assistance to: Escalate this to your Cloudflare account team to expedite the recategorization Confirm whether there is anything on Bubble’s infrastructure side contributing to this classification Advise on any additional steps I should take Domain: softplanner.app.br Bubble App: mpf100.bubbleapps.io Cloudflare Ray ID from phishing warning: 9d9a0bdf2a951f69 This issue is severely impacting my users and business. I would appreciate urgent attention. Thank you,

I don’t think this is the first time this has happened. I think you should do a bug report. @fede.bubble [image] [URGENT] AVG and AVAST flagging site as phishing (again) Need help AVG and AVAST has flagged my site as phishing. All the warnings are to do with Bubble plugins and Bubble hosted cdn files!! This even effects the bubble editor! I have submitted a false positive report to AVG and AVAST but they haven’t got back to me. I think this needs a fix from the bubble end or Bubble’s Cloudflare cdn! This happened previously: @josh can you help here please. This is catastrophic for business.

When you labeled it ‘personal finance’, you threw red flags all over the place. You should have said something like software and technology. You kind of set yourself up for this. Hopefully, you get it worked out

@rgb2909 have you submitted a support request with the team yet? [image] Home | Bubble Support Center Bubble Support Center

I´ve sent email to the support

Background - ISSUE RESOLVED My app softplanner.app.br was flagged as “Phishing” by multiple security vendors, including Microsoft Edge/SmartScreen, AVG, and Cloudflare itself. Users were seeing a phishing warning page and Edge users were getting a 403 Forbidden error — completely blocked. Root cause After investigation, I identified that the issue originated from Cloudflare miscategorizing the domain as “Phishing” and “CIPA Filter” at the infrastructure level. Since Bubble uses Cloudflare, this propagated to other security vendors automatically. What I did Confirmed the domain was clean on Google Safe Browsing, MXToolbox (70+ blacklists), Sucuri, and Fortinet Reported false positives directly to each vendor — Microsoft SmartScreen, AVG, Norton, Sophos, Forcepoint, ESET, Webroot, Trend Micro, and others Submitted recategorization requests via Cloudflare Radar multiple times Opened a ticket with Bubble Support, providing Cloudflare Ray IDs and URL Scan IDs as technical evidence When Bubble asked for clarification, I provided a formal written declaration explaining the app’s purpose and denying any connection to the alleged phishing target What resolved it Bubble’s specialized team escalated the case directly to Cloudflare. Once Cloudflare reviewed the declaration and removed the infrastructure block, everything resolved in cascade — Edge warnings disappeared, VirusTotal detections dropped, and the URL scanner verdict changed to “No classification.” Key lessons Cloudflare Radar’s public portal alone is insufficient for phishing cases — you need Bubble to escalate via their enterprise Cloudflare relationship Provide Ray IDs and URL Scan IDs — they are essential technical evidence Be persistent and document everything in the ticket If Cloudflare asks for clarification about the phishing allegation, respond with a clear, formal written declaration Hope this helps anyone facing a similar situation! :folded_hands:

Phishing Warning on Custom Domain — Cloudflare Miscategorization Affecting Legitimate App

Need help

J805 March 10, 2026, 3:36pm 2

I don’t think this is the first time this has happened. I think you should do a bug report. @fede.bubble

Topic		Replies	Views
[URGENT] AVG and AVAST flagging site as phishing (again) Need help	40	6003	November 1, 2023
Bubble down? HTML:Script.Inf (Susp) Need help	19	3336	August 9, 2022
I just started throwing this error in run mode: Bugs	2	762	February 14, 2022
Warning: Suspected Phishing Site Ahead! This link has been flagged as phishing. We suggest you avoid it Bugs	139	11227	February 17, 2022
Bubble forum being flagged as phishing site by Avast Web Shield Bugs	10	1035	August 31, 2022

Phishing Warning on Custom Domain — Cloudflare Miscategorization Affecting Legitimate App

Related topics