Address auth.mydomain.tld has been banned in almost all antiviruses and web shields reddit / selfhosted ---------------------------------------------------------------------- Dewidos2008 · 2023-10-20 15:23 Hi, a few days ago I started to fiddle around with Authentik. It was secured by HTTPS and stuff, and only used to authenticate my own websites. Suddenly Bitdefender became blocking it as a phishing website, same case with Microsoft Defender and my friends' ISP "cybershield". After this, I disabled Authentik entirely, but the address seems to be still blocked by all mentioned security software. What can I do about it? I'm planning now to use Authelia, because it's simpler. How can I prevent the same happening again? My base domain (mydomain.tld) is added to Google Search Console, should I also add this subdomain? ---------------------------------------------------------------------- revereddesecration · 2023-10-21 14:50 Not sure what you’re experiencing here. I deployed Authentik at auth.my.tld, no problems. Same with Authelia, to be fair. When you say it’s being blocked, you mean in your web browser? Which browser? All of them? If you only want basic username and password auth, Authelia is great for how simple and streamlined it is. If you want to get into more advanced features, stick with Authentik. ---------------------------------------------------------------------- isleepbad · 2023-10-21 15:24 Are your certificates expired? ---------------------------------------------------------------------- Dewidos2008 · 2023-10-21 17:51 All my certificates were freshly generated Let's Encrypt ones. ---------------------------------------------------------------------- Dewidos2008 · 2023-10-21 17:53 It was banned in Microsoft Edge, Bitdefender began to flag it and "cybershield" of one of the most popular ISPs in my country also blocked it. Every one of those gave "phishing website" as a reason. How come is Authentik a phishing website? For now I just use the OAuth2 provider from Gitea, but I'm scared that my domain will be still blocked when I would want to for example install Authelia. ---------------------------------------------------------------------- revereddesecration · 2023-10-22 03:14 What about in Firefox or Chrome? ---------------------------------------------------------------------- Dewidos2008 · 2023-10-22 10:39 It's totally fine on other browsers, but I would count the warning on Edge as a risk for losing reputation. Also, if I'd like to invite somebody who uses Edge, he could be deceived from using my auth website. ---------------------------------------------------------------------- revereddesecration · 2023-10-22 11:27 Have you clicked More Information > Report that this site does not contain threats? ---------------------------------------------------------------------- Dewidos2008 · 2023-10-22 11:49 I did, Microsoft still didn't respond, and I think that already like 72 hours have passed. I also replied to the email about the ticket being created, still no response. I guess I'll have to wait for buisness days. ---------------------------------------------------------------------- revereddesecration · 2023-10-22 11:53 Classic Microsoft… This is why we don’t use Edge, and we encourage everyone else to use Firefox instead. ---------------------------------------------------------------------- Dewidos2008 · 2023-10-22 11:56 Yeah, I also don't use Edge, but I often check if all my websites work on the most popular browsers. The Microsoft SmartScreen filter (the one also disliking unsigned exe files), which is integrated into MS Edge and Internet Explorer, detected my Authentik as a phishing website.