Phishing Website Ahead

[ajax20]

Hi

When I try to edit files in DirectAdmin I get an alert from google saying that there is phishing website ahead if I continue. The point is I do not get this message when accessing my website, but only when I try to edit a file on DirectAdmin.

I have DirectAdmin on a VPS and am the only user. I also have CSF, Iptables, maldetect, etc installed and configured.

Any ideas what is going on?

Thanks

 

[zEitEr]

Hello,

Check your IP and hostname (domains) here: http://www.google.com/safebrowsing/diagnostic?site=domain.com
Consider to replace domain.com with your data.

 

[ajax20]

zEitEr

Hi zEitEr

Thanks for replying. I just checked my domain with the google address you provided, but based on the reports given, there are no threats or malwares threatening my website. Still I'm puzzled for the mentioned alert in DirectAdmin.

 

[zEitEr]

Not sure how else can I help you with it. They say:

• If you are the owner of this web site, you can request a review of your site using Google Webmaster Tools. More information about the review process is available in Google's Webmaster Help Center.

So you might need to follow it.

 

[LawsHosting]

How are you editing the files, in the file manager? Are you using domain.com:2222 or ip:2222?

 

[wdele]

Don't you have an untrusted SSL certificate installed?

 

[ajax20]

reply

@ Peter Laws & wdele

Hi, thanks for replying.

How are you editing the files, in the file manager? Are you using domain.com:2222 or ip:2222?

since I am using Cloudflare, I have to use ip:2222. Is it possible for this to be the cause of the alert? Thanks.

Don't you have an untrusted SSL certificate installed?

I do not know about it. Can you explain that to me? Thanks.

 

[zEitEr]

Is it possible for this to be the cause of the alert?

Yes, it is. If the IP has low reputation, and is shared for other domains and users.

 

[ajax20]

IP reputation

Yes, it is. If the IP has low reputation, and is shared for other domains and users.

Do you mean previous to my purchasing the IP or at present? Because it is less than a month I have bought it and there is only one user (i.e. me) except from the admin (that also being me) on my VPS. This alert, by the way, shows up only very rarely recently. I am wondering if this can be because of me signing up in Google Webmaster Tools.

Thanks

 

[zEitEr]

I don't know all the details, so the only thing is left is to guess.