These forums are locked and archived, but all topics have been migrated to the new forum. You can search for this topic on the new forum: Search for How to prevent one domain's SSL cert on Virtualmin being accessible from all domains on server on the new forum.
Apache will always serve a vhost when it receives a request. So when the user requests an HTTPS URL for which your Apache is not configured, it will serve the default vhost instead. Which in your case probably happens to be the one you don't wish to be served.
You can only circumvent that by creating a "dummy" domain and defining that as the default for the IP in question.