I can share the code to prove that I don’t phish, I’m seriously worried that these reports will ban me from the services!
Now, because only one scanner reported Phishing on these sites, the possibility of such being a false flag is high. However, because of how strict InfinityFree’s Zero-Tolerance Policy is, this one flag is what’s worrying me.
InfinityFree isn’t going to suspend you just because one or more third-party scanners flag it to be malicious- especially because there are so many services that claim any sites running on the free subdomains are bad merely because of the base domain’s bad reputation.
What would trigger the process for a possible suspension is if somebody submitted an abuse report on your site to InfinityFree directly, but even then they aren’t going to suspend you forever if it’s provable that you aren’t phishing (or otherwise breaking the TOS of course).
That doesn’t mean we blindly trust anyone who says a website is doing phishing and take down websites with zero verification.
I’m pretty sure we don’t use data from Trustwave, and it’s entirely possible that Trustwave has just listed the entire rf.gd domain. And no, we’re not going to take down your websites just because you use a free subdomain.
While the code I have is something I don’t want to share, I can tell you this:
Databases. If you want a good webmail client like JriMail, you need good-formatted databases.
For your users’ account info, you will need to use an entirely different database to help avoid mixing things and exposing sensitive data.
For the webmails, every user has a unique table for their webmail, and there is an index table to help map usernames to the tables. These are all in a different database.
You will also need cookies and PHP code.
I don’t want to expose too much, because security and things.
EDIT: I forgot to mention, if you are hand-developing the code, and you are new to PHP, reserve a few days/weeks of time. (Maybe 3 weeks, but it depends on how well you learn.) Also, don’t stop developing when you have something good working. After all, you want a nice platform, and you don’t want any security breaches.