Five of my sites are flagged by Safari's Deceptive Website Warning. They are legitimate and none of them collect credentials, imitate another brand or contain social engineering content:
- store-api.ru — paid access to third-party AI APIs (clearly states it is not affiliated with OpenAI, Anthropic or Google)
- cenwise.ru — price comparison service
- kirillportfolio.ru — personal developer portfolio (no login, no forms, no data collection at all)
- 3021.ru — habit tracking app
- animegenai.ru — AI image generation service
All five are clean in Google Safe Browsing, Google Transparency Report, Google Search Console and Yandex Webmaster. Safari is the only place showing a warning.
The flag appears to be inherited from a previous hosting provider whose IP ranges had reputation problems, and it seems attached to the domain names rather than to the current infrastructure. This is directly testable:
- On 20 July 2026 all sites were migrated to a new host — a single server, single IP (152.53.119.191).
- On that exact same server and IP, the domains created AFTER the migration are NOT flagged: filelama.com (live since 28 July, fully indexed), novelisstory.ru (25 July) and store-api.com (4 August).
- Only the domains that already existed under the previous host are still flagged.
- Same server, same IP, same certificates, same kind of content. The only variable is whether the domain existed before 20 July.
store-api.ru and store-api.com are the clearest case: both are literally the same application behind the same nginx on the same IP, differing only in the domain name. The .ru is flagged, the .com is not.
I submitted requests through websitereview.apple.com on 20 July and again on 11 August 2026. Neither produced a response or an acknowledgement, which as I understand is expected behaviour for that form.
My questions:
- Is websitereview.apple.com still the correct — and only — channel for a site owner to dispute a false positive?
- Is there any way to confirm that a submission was received, or a typical review timeframe I should expect?
- Would a Feedback Assistant report under Safari add anything here, or would it simply duplicate the request?