How to remove your website from Security Blacklists
How to remove your website from Security Blacklists
How to remove your website from Security Blacklists
Last Updated 7 months ago
Comprehensive Guide on how to make False Positive Requests to the following Companies:
As a first step, you will need to identify the corresponding Security Companies where your site is Blacklisted using this link: https://www.virustotal.com/gui/home/url
Once you are aware of the security blacklists you can start solving them one by one. Unfortunately, there is no option to solve them all in one go. Their resolution times also greatly vary.
ADMINUSLabs
*No False Positive Submission Form
1/ Using your company/website email, send the request to falsepositive@adminuslabs.net
2/ Create an email with the title "False Positive Request for domain[.]name
**(please note that the period in between the domain name should be placed inside brackets to prevent blacklisting when sending emails)
AegisLab WebGuard
*No False Positive Submission Form
1/ You may read more details on sending a false positive request from here, Using your company/website email, send the request to support@aegislab.com
2/ Create an email with the title "False Positive Request for domain[.]name
**(please note that the period in between the domain name should be placed inside brackets to prevent blacklisting when sending emails)
Agnitum
1/ To Report a suspected false positive you will need to create an account here and follow the whole guide.
2/ Create a ticket, start a chat with their support here
Antiy-AVL
1 / Given there is no form to which we can directly send the False Positive Request all over the web, it would be best to contact their main support using your company/website email: support@antiy.cn or submit@antiy.com
2/ Create an email with the title "False Positive Request for domain[.]name
**(please note that the period in between the domain name should be placed inside
brackets to prevent blacklisting when sending emails)
AlphaMountain.ai
1/ Submit the False Positive request from here by filling up the required forms:
https://www.alphamountain.ai/contact/
AlienVault
1/ In order to proceed with the removal, the website requires you to log in or create your own account (if you do not have one) https://otx.alienvault.com/submissions/list
Adaware
1 / Report a False Positive from here
ArcaVir/arcabit
1 / Send an email to either of the following here: pomoc@arcabit.pl or support@arcabit.com
2/ Create an email with the title "False Positive Request for domain[.]name
**(please note that the period in between the domain name should be placed inside
brackets to prevent blacklisting when sending emails)
Ashampoo
1/ submit malware to Emsisoft and Bitdefender as Ashampoo uses the same signatures
Auslogics
1/ Submit a request to their Contact Auslogics form and go to "technical support"
Autoshun
1 / submit an email to either of the following here: info@autoshun.org and support@riskanalytics.com
2/ Create an email with the title "False Positive Request for domain[.]name
**(please note that the period in between the domain name should be placed inside
brackets to prevent blacklisting when sending emails)
Avanquest
1 / Fill up the form here: Submit a ticket: Avanquest Technical Support
Avast
1 / Fill up the form here: https://www.avast.com/en-ph/false-positive-file-form.php
AVG
1 / Fill up and submit a false positive review request on this form: https://secure.avg.com/submit-sample
2 / or you may create your own account here: https://myaccount.avg.com to receive real-time updates and responses from their support
Avira
1 / Fill up and submit a false positive review request on this form: https://www.avira.com/en/analysis/submit-url
Abusix
1 / Fill up and submit a false positive review request on this form:
Acronis
1 / Using your company/website email, send the request to: cybersecuritylab@acronis.com
2/ Create an email with the title "False Positive Request for domain[.]name
**(please note that the period in between the domain name should be placed inside
brackets to prevent blacklisting when sending emails)
AhnLab
1 / Using your company/website email, send the request to: e-support@ahnlab.com or v3sos@ahnlab.com
2/ Create an email with the title "False Positive Request for domain[.]name
**(please note that the period in between the domain name should be placed inside
brackets to prevent blacklisting when sending emails)
BackScatterer removal
1/ Start removing your website from their list by going to their test link: http://www.backscatterer.org/index.php?target=test and proceed from there.
BARRACUDA
1/ Go to this link and enter your domain, proceed with the removal of your website from their blacklist.
Bfore.Ai PreCrime
1 / Fill up and submit a false positive review request on this form: https://bfore.ai/support/
BitDefender
1/ Go to this link http://www.bitdefender.com/submit/ and if you did not receive any response within 72 hours, simply open a ticket to their Support page: https://www.bitdefender.com/consumer/support/
Bkav
*No False Positive Submission Form
1/ Using your company/website email, send the request to bkav@bkav.com.vn
2/ Create an email with the title "False Positive Request for domain[.]name
**(please note that the period in between the domain name should be placed inside
brackets to prevent blacklisting when sending emails)
BluePoint
1/ Using your company/website email, send the request samples@bluepointsecurity.com
2/ Create an email with the title "False Positive Request for domain[.]name
**(please note that the period in between the domain name should be placed inside
brackets to prevent blacklisting when sending emails)
Blueliv
1/ Please send an email to the email address: support@blueliv.com
including the details of the false positive request and the link to the VirusTotal so their support team can assist you.
BullGuard
1/ To report a false positive detection, archive the detected file using "infected" as a password and send it to support@bullguard.com along with a screenshot of the detection.
2/ Or Submit malware to BitDefender as BullGuard uses the same signatures
Centego/Certigo
1/ Fill up the contact form here: Contacts | Certego and provide the needed details.
C-SIRT
1/ send a review for False Positive to their support email:
csirt@csirt.org
2/ Create an email with the title "False Positive Request for domain[.]name
**(please note that the period in between the domain name should be placed inside
brackets to prevent blacklisting when sending emails)
Celframe
1/ Fill in their "Contact Us Form" to make a False Positive Review Request
Certego
1/ submit False Positive Review Request to email: cti@certego.net
2/ Create an email with the title "False Positive Request for domain[.]name
**(please note that the period in between the domain name should be placed inside
brackets to prevent blacklisting when sending emails)
ClamAV
1/ submit False Positive Review Request to email: info@chicalogic.com
2/ Create an email with the title "False Positive Request for domain[.]name
**(please note that the period in between the domain name should be placed inside
brackets to prevent blacklisting when sending emails)
3/ or Submit malware to Immunet Protect as ClamAV uses the same signatures
CLEAN MX
1/ submit False Positive Review Request to email: abuse@clean-mx.de
2/ Create an email with the title "False Positive Request for domain[.]name
**(please note that the period in between the domain name should be placed inside
brackets to prevent blacklisting when sending emails)
3/ Or fill up the submission form here: https://www.clamav.net/reports/fp
CMC Threat Intelligence
1/ send False Positive Review Request via their support email (contact form) here: https://cmcts.com.vn/contact
Comodo Site Inspector/Verdict
1/ Fill up their review request form here: https://verdict.valkyrie.comodo.com/contact/us/
2/ Please indicate your site when filling up the "usage scenario" form, then that's it, click send!
Constant Guard/xfinity
1/Submit malware to Symantec as Constant Guard uses the same signatures
Cyberoam
1/ Submit malware to Avira as Cyberoam uses the same signatures
CRDF
1/ Fill up the submission form here: https://threatcenter.crdf.fr/false_positive.html
CrowdStrike ML
1/ Submit the file to https://www.hybrid-analysis.com/ and email the link to opswat_scanner@crowdstrike.com
CyRen
1/ Fill up the submission form here: https://kb.cyren.com/av-support/?/Tickets/Submit/RenderForm/7
CyRadar
1/ submit False Positive Review Request to email:virustotal@cyradar.com
2/ Create an email with the title "False Positive Request for domain[.]name
**(please note that the period in between the domain name should be placed inside
brackets to prevent blacklisting when sending emails)
DNS8
1/ submit False Positive Review Request to email: dns8@layer8.pt
2/ Create an email with the title "False Positive Request for domain[.]name
**(please note that the period in between the domain name should be placed inside
brackets to prevent blacklisting when sending emails)
Dr.Web
1/ Fill up the submission form here: https://support.drweb.com/new/urlfilter/?lng=en
or https://vms.drweb.com/sendvirus/
Digital Defender
1/ Send a Review Request to their support email: info@digital-defender.com
Or fill up their contact form here: https://www.digital-defender.com/support.html
2/ Or Fill in the submission form here: https://digital-defender.com/sample-submission.html
Emsisoft
1/ Fill in the submission form
1/ submit False Positive Review Request to email: submit@emsisoft.com or
fp@emsisoft.com
2/ Create an email with the title "False Positive Request for domain[.]name
**(please note that the period in between the domain name should be placed inside
brackets to prevent blacklisting when sending emails)
3/ or direct contact them on Chat, Email here: Emsisoft Help
ESET
1/ submit False Positive Review Request to email: samples@eset.com
include Domain whitelist followed by the blocked domain
eSafe/Aladdin
1/ Registered users can log in through this site, request support, and attach the suspicious file for False Positive review
eScan
1/ Online Malware Submission (Select “Submit a Ticket” and then Samples)
F-Secure
1/ Submit a request here: Submit a sample | F-Secure
2/ Or submit False Positive Review Request to email: vsamples@f-secure.com
with the title "False Positive Request for domain[.]name
**(please note that the period in between the domain name should be placed inside
brackets to prevent blacklisting when sending emails)
Filseclab
1/ submit False Positive Review Request to email: fp@filseclab.com
2/ Create an email with the title "False Positive Request for domain[.]name
**(please note that the period in between the domain name should be placed inside
brackets to prevent blacklisting when sending emails)
FABELSOURCES
1/ Submit a request here using your site's IP address, required log in here:
IP Delisting Request - spamsources.fabel.dk
Forcepoint ThreatSeeker
1/ submit False Positive Review Request to email: suggest@websense.com
2/ Create an email with the title "False Positive Request for domain[.]name
**(please note that the period in between the domain name should be placed inside
brackets to prevent blacklisting when sending emails)
Fortinet
1/ Use the submission form: https://fortiguard.com/faq/wfratingsubmit
2/ Or submit False Positive Review Request to email: submitvirus@fortinet.com
2/ Create an email with the title "False Positive Request for domain[.]name
**(please note that the period in between the domain name should be placed inside
brackets to prevent blacklisting when sending emails)
G-Data | gdatasoftware.com
1/ Fill up the submission form here: https://submit.gdatasoftware.com/url
Google adwords
1/ Visit https://adwords.google.com and initiate a chat to their support team.
Google phishing
1/ Fill up the submission form here: https://safebrowsing.google.com/safebrowsing/report_error/?hl=en
Google Search Console (Google Webmasters Tool)
Request Indexing
1/ Log on to Google Search Console (opens in a new tab).
2/ Add a property.
3/ Submit a URL of the website that you want to get re-crawled
4/ Click the Request indexing Button
5/ Regularly check the URL in the Inspection Tool.
so you can check any issues Google has in their books for the site, plus you can also submit any relevant details to them about why your site is now clean and protected to make sure they give it the 100% clean bill of health.
Git Hub
1/ Requires login and create your account here: https://github.com
Heimdal Security
1/ create a ticket or submit False Positive Review Request to email: support@heimdalsecurity.com
2/ Create an email with the title "False Positive Request for domain[.]name
**(please note that the period in between the domain name should be placed inside
brackets to prevent blacklisting when sending emails)
Hitman Pro
1/ Submit malware to BitDefender, Kaspersky, and Emsisoft as Hitman Pro uses the same signatures
Huorong
1/ submit False Positive Review Request to email: fp@filseclab.com
2/ Create an email with the title "False Positive Request for domain[.]name
**(please note that the period in between the domain name should be placed inside
brackets to prevent blacklisting when sending emails)
ivmSIP
1/ Fill up the submission form here: http://www.invaluement.com/removal/
Immunet Protect
1/ Fill up their submission form here: Immunet AntiVirus
Kapersky
1/ Fill up the submission form here: Kaspersky Threat Intelligence Portal
2/ Choose the "LOOKUP" form and enter the web address.
3/ Send a request for review via their contact box.
K7
1/ submit False Positive Review Request to email: support@k7computing.com orreportfp@labs.k7computing.com
https://support.k7computing.com/index.php?/Knowledgebase/Article/View/3/0/how-to-report-a-false-detectio
2/ Create an email with the title "False Positive Request for domain[.]name
**(please note that the period in between the domain name should be placed inside
brackets to prevent blacklisting when sending emails)
LashBack
1/ Fill up the delisting form here: http://blacklist.lashback.com/delist
Lionic
1/ Fill up their submission form here: Reporting False Positive
MAILSPIKE BL
1/ Fill up the submission form for delisting request here: http://mailspike.org/iplookup.html
Malware Domain Blocklist
1/ submit False Positive Review Request to email: malwaredomains@gmail.com
2/ Create an email with the title "False Positive Request for domain[.]name
**(please note that the period in between the domain name should be placed inside
brackets to prevent blacklisting when sending emails)
Lavasoft Ad-Aware
1/ Fill up the submission form here: https://www.adaware.com/submit-a-malware
MalwareBytes
1/ Submit a support ticket here: Malwarebytes Support
2/ Or requires to create an account and log in to make a direct request via Forum:
False Positives - Malwarebytes Forums
Lumension
1/ Submit malware to Norman as Lumension uses the same signatures
McAfee
1/ Online malware submission is available to registered users here
Or, submit URL for review here: https://www.trustedsource.org/?p=mcafee
2/ Or one can submit a request via email: virus_research@avertlabs.com or sites@mcafee.com
email with the title "False Positive Request for domain[.]name
**(please note that the period in between the domain name should be placed inside
brackets to prevent blacklisting when sending emails)
Microsoft Security Essentials
1/ Submit your request here: Submit a file for malware analysis - Microsoft Security Intelligence
Norton
1/ Fill up the submission form here: NortonLifeLock Customer Support Portal
NetCraft
1/ Fill up the submission form here: https://report.netcraft.com/report/mistake
Nano Antivirus
1/ Fill up the submission form here
Phishtank
1/ submit False Positive Review Request to email: phish@phishtank.com
2/ Create an email with the title "False Positive Request for domain[.]name
**(please note that the period in between the domain name should be placed inside
brackets to prevent blacklisting when sending emails)
Panda
1/ Fill up the submission form here
QuickHeal and Seqrite
1/ Fill up the submission form here
(Fill in necessary information and select “Sample File Submission”)
Qihoo Antivirus/360
1/ Fill up the submission form here
Quttera
1/ Create a support ticket here: Quttera Helpdesk
2/ Or submit False Positive Review Request to email: support@quttera.com
with the title "False Positive Request for domain[.]name
**(please note that the period in between the domain name should be placed inside
brackets to prevent blacklisting when sending emails)
Rising
1/ Delist your website here: Report file center (rising.com.cn)
RocketCyber
1/ submit False Positive Review Request to email: support@rocketcyber.com
2/ Create an email with the title "False Positive Request for domain[.]name
**(please note that the period in between the domain name should be placed inside
brackets to prevent blacklisting when sending emails)
ShawSecure
1/ Submit malware to McAfee as Shaw Secure uses the same signatures
SangFor
1/ Click on the link below and log in (you may need to register first here before you can feedback the inquiry).
2/ Navigate to User > Feedback and fill in the necessary information.
3/ Or create and send an email to save@sangfor.com.cn
with the title "False Positive Request for domain[.]name
**(please note that the period in between the domain name should be placed inside
brackets to prevent blacklisting when sending emails)
Seclookup
1/ click this link: https://seclookup.com/contact-us/ or to report false positives.
2/ Or, please mail them at info@seclookup.com and they will respond to you within 24Hrs with a resolution.
SCUMWARE
1/ Fill in the submission form here: https://www.scumware.org/removals.php
Sophos
1/ Fill up the form here and choose "web address"
SORBS
1/ Requires you to create an account for you to be able to log in here
Spybot Search & Destroy
1/ Fill in the submission form here
Sucuri
1/ Go to https://docs.sucuri.net/website-firewall/whitelist-and-blacklist/whitelist-an-ip-address/
2/ enter the IP address of the website on the menu.
Systweak
1/ Fill in the submission form: http://support.systweak.com/kayako/index.php?/Tickets/Submit
Tachyon
1/ submit False Positive Review Request to email: isarc@inca.co.kr
(send the false positive zip file with protected password and detection name)
2/ Create an email with the title "False Positive Request for domain[.]name
**(please note that the period in between the domain name should be placed inside
brackets to prevent blacklisting when sending emails)
TrendMICRO
1/ Fill in the URL checker here
2/ or send an email to: trendlabs@av-emea.com
2/ Create an email with the title "False Positive Request for domain[.]name
**(please note that the period in between the domain name should be placed inside
brackets to prevent blacklisting when sending emails)
3/ Or fill in the submission form here: https://success.trendmicro.com/sign-in?startURL=/new-request?issue=analyze
Trustwave
1/ Fill in the submission form here
UCEPROTECTL1
1/ Fill in your site's IP address to screen on their IP checker here
VirIT
1/ Fill in the submission form here:
http://www.tgsoft.it/italy/file_sospetti.asp
Viettel Threat Intelligence
Go to this LINK
Vipre
1/ Fill in the submission form here
Websense ThreatSeeker
1/ submit False Positive Review Request to email: suggest@websense.com
2/ Create an email with the title "False Positive Request for domain[.]name
**(please note that the period in between the domain name should be placed inside
brackets to prevent blacklisting when sending emails)
Webroot
1/ Fill in the submission form here
Webutation Spamhaus
1/ Fill in the IP address checker here
Yandex Safebrowsing
1/ Requires to create an account and log in
2/ Add the website on the list to get it reviewed here
Zillya
1/ submit False Positive Review Request to email: help@zillya.com
2/ Create an email with the title "False Positive Request for domain[.]name
**(please note that the period in between the domain name should be placed inside
brackets to prevent blacklisting when sending emails)
3/ Or options to contact support: https://zillya.com/support
-------------------------------------
If a Kaspersky application blocks your website or application, follow the instructions from this article.
If you suspect a false positive:
- Check the file or the website using OpenTip.
- If you do not agree with the results, send the object for further analysis to Kaspersky specialists. To do this, click Submit to reanalyze on the results page.
- Enter your email address so that we can contact you if necessary. Click Send.
If you experience any problems uploading the file, use a different browser or open OpenTip in incognito mode.
https://www.brightcloud.com/tools/change-request.php#
