False Positive & Website Blacklist Removal Links

Direct vendor review routes

Use this directory when an antivirus, browser, mail filter or reputation service has flagged a clean website or file. Save the exact warning first, rule out a real compromise, then choose the vendor below and submit one complete review.

Content reviewed July 13, 2026.

By DrGlenn — USA-based WordPress security specialist· 290+ cleanups across 34 countries· Updated June 22, 2026

cyber security 10

Start here: step-by-step removal guides for every blacklist & antivirus, plus a free Is My Site Hacked? checker. If your website has been blacklisted and visitors are receiving warnings, DrGlenn has some self-help for you. If the blacklist is in the list below, use the contact info to reach out and get yourself delisted. If not, please come back and report the blacklist and how to remove it using the form on this page. Be sure to include all the links and details so DrGlenn can help others that have the same issue. Blacklists are very frustrating. Together, we can clean it up and get you back on track. 

\\Stuck\ getting\ your\ site\ delisted\?\ Tell\ me\ which\ blacklist\ flagged\ you\ and\ I\&rsquo\;ll\ help\ you\ get\ it\ cleared\.\<\/p\>\Get\ in\ touch\ \\&rarr\;\<\/span\>\<\/a\>\<\/div\>

How to use this false-positive directory

  1. Record the exact detection. Save the vendor name, warning text, affected URL or file hash, detection time and a screenshot.
  2. Rule out a real compromise. Check redirects, unexpected files, administrators, scheduled tasks and database injections before appealing.
  3. Submit one complete review. Explain what was checked or cleaned, include reproducible evidence and retain the case number.
  4. Retest after the vendor replies. Browser, URL-reputation and file detections can use different review queues.

Frequently used guides: SecureAge
SecureAge APEX false positive removal, G Data
G Data false positive removal, SURBL
SURBL false positive removal, SentinelOne
SentinelOne false positive removal, Avira
Avira false positive removal and Sophos
Sophos false positive removal.

BlackList Name

How to Report False Positive to the Blacklist

360
Qihoo 360 (360 Total Security) false positive removal
kefu@360.cn
 AhnLab
AhnLab (V3) false positive removal
https://global.ahnlab.com/site/support/virusreport/virusReport.do
 Cyberoam https://www.techsupportalert.com/how-to-report-malware-or-false-positives-to-multiple-antivirus-vendors/#Avira
Acronis
Acronis false positive removal
https://kb.acronis.com/content/62189
Ad-Aware
Adaware false positive removal
https://www.adaware.com/report-false-positives
AegisLab
AegisLab false positive removal
support@aegislab.com
ADMINUSLabs
ADMINUSLabs false positive removal
samples@adminus.net
Agnitum
Agnitum (Outpost) false positive removal
trojans@agnitum.com
Ahnlab e-support@ahnlab.com, samples@ahnlab.com
AhnLab-V3 v3sos@ahnlab.com
Alibaba virustotal@list.alibaba-inc.com
Alyac (Estsoft)
AlYac (ESTsecurity) false positive removal
esrc@estsecurity.com
Antivir cleanset@avira.com, virus_malware@avira.com, virus@avira.com
Antiy
Antiy-AVL false positive removal
avlsdk_support_vt@antiy.cn
Antiy-AVL https://www.antiy.net/contacts/
Arcabit
Arcabit false positive removal
virus@arcabit.com
Ashampoo https://www.techsupportalert.com/how-to-report-malware-or-false-positives-to-multiple-antivirus-vendors/#Emsisoft
https://www.techsupportalert.com/how-to-report-malware-or-false-positives-to-multiple-antivirus-vendors/#Bitdefender
Auslogics https://www.techsupportalert.com/how-to-report-malware-or-false-positives-to-multiple-antivirus-vendors/#Bitdefender
Avast
Avast false positive removal
virus@avast.com
https://www.avast.com/false-positive-file-form.php
AVG
AVG false positive removal
http://www.avg.com/submit-sample
https://www.avg.com/en-us/false-positive-file-form
http://samplesubmit.avg.com/us-en/false-detection
Avira https://www.avira.com/en/analysis/submit
Avira AntiVir https://analysis.avira.com/en/submit
AVZ
AVZ (Antiviral Toolkit) false positive removal
https://www.techsupportalert.com/how-to-report-malware-or-false-positives-to-multiple-antivirus-vendors/#Kaspersky
Babable
Babable false positive removal
obu@babable.com
Baidu
Baidu false positive removal
bav@baidu.com, gaoyingchun@baidu.com
BitDefender
Bitdefender false positive removal
virus_submission@bitdefender.com
https://www.bitdefender.com/consumer/support/answer/40673/
http://www.bitdefender.com/site/Main/automaticSampleUploader/
Bkav
Bkav false positive removal
fpreport@bkav.com
bkav@bkav.com
bkav@bkav.com.vn
BluePoint Security
BluePoint Security false positive removal
fp@bluepointsecurity.com?subject=False%20Positive%20Submission&body=The%20sample%20is%20in%20a%20password%20protected%20zip%20file%0A%0AThe%20password%20for%20the%20attachment%20is%20infected
BullGuard https://www.techsupportalert.com/how-to-report-malware-or-false-positives-to-multiple-antivirus-vendors/#Bitdefender
ByteHero
ByteHero false positive removal
bytehero@163.com
CAT-QuickHeal
Quick Heal false positive removal
https://www.quickheal.com/submitticket/
Certego
Certego false positive removal
https://www.certego.net/en/contatti/
ClamAV http://www.clamav.net/reports/fp
https://www.immunet.com/false_positive
ChongLuaDao
ChongLuaDao false positive removal
https://chongluadao.vn/en/report/reportmistake
Clean-MX
Clean-MX false positive removal
abuse@clean-mx.de
CMC
CMC (CMC InfoSec) false positive removal
vulambang@cmcinfosec.com, support.is@cmclab.net
Comodo
Comodo / Xcitium false positive removal
malwaresubmit@avlab.comodo.com
https://www.comodo.com/home/internet-security/submit.php falsepositive@avlab.comodo.com
https://www.comodo.com/home/internet-security/submit.php
Constant Guard/xfinity
Constant Guard (Xfinity) false positive removal
https://www.techsupportalert.com/how-to-report-malware-or-false-positives-to-multiple-antivirus-vendors/#Symantec
CrowdStrike
CrowdStrike false positive removal
VTscanner@crowdstrike.com
CrowdStrike Falcon VTscanner@crowdstrike.com
Cybereason
Cybereason false positive removal
vt-feedback@cybereason.com
Cylance
Cylance (now Arctic Wolf) false positive removal
cylancefilesubmit@cylance.com
https://web.archive.org/web/20190929165253/https://home-support.cylance.com/hc/en-us/articles/360026236014-FAQ-VirusTotal-Inquiry
CyRadar
CyRadar false positive removal
virustotal@cyradar.com
Cyren
Cyren (now Varist) false positive removal
https://www.cyren.com/support/reporting-av-misclassifications
DNS8
DNS8 false positive removal
dns8@layer8.pt
Dr. Web
Dr.Web false positive removal
https://vms.drweb.com/sendvirus/
DrWeb: vms@drweb.com
eGambit
TEHTRIS (eGambit) false positive removal
https://tehtris.com/en/false-positive-negative-requests/
eGambit (Tehtris) https://tehtris.com/egambit_fp.php
Elastic
Elastic Security false positive removal
https://discuss.elastic.co/t/submitting-false-positives/232322
Emco
EMCO Malware Destroyer false positive removal
malware@emcosoftware.com?subject=False%20Positive%20Submission&body=The%20sample%20is%20in%20a%20password%20protected%20zip%20file%0A%0AThe%20password%20for%20the%20attachment%20is%20infected
Emsisoft
Emsisoft false positive removal
submit@emsisoft.com
fp@emsisoft.com
Endgame
Endgame false positive removal
info@endgame.com
eScan
eScan / MicroWorld false positive removal
fp@escanav.com
http://support.mwti.net/support/index.php
ESET
ESET false positive removal
https://support.eset.com/kb141/?page=content&id=SOLN141
ESET-NOD32 https://support.eset.com/en/kb141-submit-a-virus-website-or-potential-false-positive-sample-to-the-eset-lab#SubmitFile
Faronics support@faronics.com?subject=False%20Positive%20Submission&body=The%20sample%20is%20in%20a%20password%20protected%20zip%20file%0A%0AThe%20password%20for%20the%20attachment%20is%20infected
FireEye
Trellix / FireEye false positive removal
virustotal@fireeye.com
Forcepoint (websense) suggest@forcepoint.com
Fortinet
Fortinet (FortiGuard Web Filter) false positive removal
submitvirus@fortinet.com
Fortinet/FortiGuard submitvirus@fortinet.com?subject=False%20Positive%20Submission&body=The%20sample%20is%20in%20a%20password%20protected%20zip%20file%0A%0AThe%20password%20for%20the%20attachment%20is%20infected
FortKnox SpyEmergency/Netgate mailto:research@spy-emergency.com?subject=False%20Positive%20Submission&body=The%20sample%20is%20in%20a%20password%20protected%20zip%20file%0A%0AThe%20password%20for%20the%20attachment%20is%20infected
F-Prot
F-Prot false positive removal
viruslab@f-prot.com
F-Prot/FRISK http://support.f-prot.com/index.php?/Tickets/Submit/RenderForm/7
F-Secure
F-Secure false positive removal
spyware-samples@f-secure.com, vsamples@f-secure.com
https://www.f-secure.com/en/business/support-and-downloads/submit-a-sample
https://www.f-secure.com/us-en/business/support-and-downloads/submit-a-sample
G Data https://su.gdatasoftware.com/us/sample-submission/
https://www.gdatasoftware.com/faq/consumer/submit-a-suspicious-file-app-or-url
Gridinsoft
Gridinsoft false positive removal
https://gridinsoft.com/incorrect-detection
Hacksoft
TheHacker false positive removal
virus@hacksoft.com.pe
Hauri
Hauri (ViRobot) false positive removal
viruslab@hauri.co.kr
Hitman Pro https://www.techsupportalert.com/how-to-report-malware-or-false-positives-to-multiple-antivirus-vendors/#Bitdefender
https://www.techsupportalert.com/how-to-report-malware-or-false-positives-to-multiple-antivirus-vendors/#Kaspersky
https://www.techsupportalert.com/how-to-report-malware-or-false-positives-to-multiple-antivirus-vendors/#Emsisoft
HomePage support@aegislab.com?subject=False%20Positive%20Submission&body=The%20sample%20is%20in%20a%20password%20protected%20zip%20file%0A%0AThe%20password%20for%20the%20attachment%20is%20infected
Ikarus
Ikarus false positive removal
fp@ikarus.at, samples@ikarus.at
probe@ikarus.at
Immunet Protect
Immunet false positive removal
http://www.immunet.com/contact/index.html
Invincea
Invincea false positive removal
info@invincea.com
Jiangmin
Jiangmin false positive removal
support@jiangmin.com
shaojia@jiangmin.com
K7
K7 false positive removal
reportfp@labs.k7computing.com
k7viruslab@labs.k7computing.com
reportfp@k7computing.com <reportfp@k7computing.com>;
K7AntiVirus / K7GW support@k7computing.com
Kaspersky
Kaspersky false positive removal
https://opentip.kaspersky.com/
https://my.kaspersky.com/?logonSessionData=MyAccount&returnUrl=en%2fkpc%2fsupport%2fviruslab
Kaspersky: newvirus@kaspersky.com
Kingsoft (Cheetah)
Kingsoft (Cheetah Mobile) false positive removal
operation@cmcm.com
Lavasoft Ad-Aware http://lavasoft.com/support/securitycenter/report_false_positives.php
LevelBlue (AlienVault)
LevelBlue (AlienVault / AT&T) false positive removal
https://support.levelblue.com/virustotal-detection-review/
Lionic
Lionic false positive removal
https://www.lionic.com/reportfp/
Lumension https://www.techsupportalert.com/how-to-report-malware-or-false-positives-to-multiple-antivirus-vendors/#Norman
Malwarebytes
Malwarebytes (Browser Guard) false positive removal
https://forums.malwarebytes.org/index.php?/forum/42-file-detections/
MalwareURL
MalwareURL false positive removal
https://www.malwareurl.com/
MAX (SaintSecurity)
MAX (Saint Security) false positive removal
root@malwares.com
MaxSecure
Max Secure false positive removal
tech@maxpcsecure.com
McAfee
McAfee WebAdvisor / SiteAdvisor false positive removal
virus_research@avertlabs.com
https://mysupport.mcafee.com/Eservice/Default.aspx
virus_research@mcafee.com?subject=FALSE%3A%20This%20Sample%20Is%20A%20False%20Positive&body=The%20sample%20is%20in%20a%20password%20protected%20zip%20file%0A%0AThe%20password%20for%20the%20attachment%20is%20infected
virus_research@mcafee.com?subject=FALSE%3A%20This%20Sample%20Is%20A%20False%20Positive&body=The%20sample%20is%20in%20a%20password%20protected%20zip%20file%0A%0AThe%20password%20for%20the%20attachment%20is%20infected
McAfee-GW virus_research_gateway@avertlabs.com
Microsoft
Microsoft Defender SmartScreen false positive removal
mmpc@submit.microsoft.com
Microsoft Security Essentials https://www.microsoft.com/security/portal/Submission/Submit.aspx
Microworld samples@escanav.com
Moon Secure https://www.techsupportalert.com/how-to-report-malware-or-false-positives-to-multiple-antivirus-vendors/#Immunet_Protect
Msecure https://www.techsupportalert.com/how-to-report-malware-or-false-positives-to-multiple-antivirus-vendors/#Ikarus
Nod32/ESET samples@eset.com?subject=False%20Positive%20Submission&body=The%20sample%20is%20in%20a%20password%20protected%20zip%20file%0A%0AThe%20password%20for%20the%20attachment%20is%20infected
NoraScan support@noralabs.com?subject=False%20Positive%20Submission&body=The%20sample%20is%20in%20a%20password%20protected%20zip%20file%0A%0AThe%20password%20for%20the%20attachment%20is%20infected
Norman
Norman false positive removal:
analysis@norman.no, support@norman.com
nProtect (Inca)
nProtect (Inca Internet) false positive removal
virus_info@inca.co.kr
Palo Alto
Palo Alto Networks (WildFire) false positive removal
vt-pan-false-positive@paloaltonetworks.com
Panda
Panda false positive removal
falsepositives@pandasecurity.com, virussamples@pandasecurity.com
https://www.pandasecurity.com/usa/homeusers/support/contact.htm?ts=1
https://pandasecurity.com/usa/homeusers/support/contact.htm?ts=1
falsepositives@pandasecurity.com?subject=False%20Positive%20Submission&body=The%20sample%20is%20in%20a%20password%20protected%20zip%20file%0A%0AThe%20password%20for%20the%20attachment%20is%20infected
Phising Database https://github.com/mitchellkrogza/Phishing.Database#please-remove-my-domain-from-this-list-
Preventon
Preventon false positive removal
sample@preventon.com?subject=False%20Positive%20Submission&body=The%20sample%20is%20in%20a%20password%20protected%20zip%20file%0A%0AThe%20password%20for%20the%20attachment%20is%20infected
Qihoo-360 https://www.360totalsecurity.com/en/suspicion/false-positive/
QuickHeal viruslab@quickheal.com
Rising
Rising false positive removal
http://mailcenter.rising.com.cn/filecheck_en/
Roboscan/ALYac
Roboscan false positive removal
http://www.roboscan.com/support/virus_report.aspx
Sangfor Engine Zero
Sangfor Engine Zero false positive removal
save@sangfor.com.cn
SecureAge APEX https://uav.secureage.com/falsepositive/
Sentinel One report@sentinelone.com
ShawSecure https://www.techsupportalert.com/how-to-report-malware-or-false-positives-to-multiple-antivirus-vendors/#McAfee
SmartCOP
SmartCOP false positive removal
support@s-cop.com?subject=False%20Positive%20Submission&body=The%20sample%20is%20in%20a%20password%20protected%20zip%20file%0A%0AThe%20password%20for%20the%20attachment%20is%20infected
Sophos samples@sophos.com
https://secure.sophos.com/support/samples
Spybot Search & Destroy
Spybot Search & Destroy false positive removal
http://www.safer-networking.org/contact/detections/
SRN/Solo Antivirus
SRN Micro / Solo Antivirus false positive removal
vlab@srnmicro.com?subject=False%20Positive%20Submission&body=The%20sample%20is%20in%20a%20password%20protected%20zip%20file%0A%0AThe%20password%20for%20the%20attachment%20is%20infected
Symantec
Symantec (Broadcom) false positive removal
https://submit.symantec.com/false_positive/
avsubmit@symantec.com
https://symsubmit.symantec.com/
Tachyon isarc@inca.co.kr (include detection name)
Tencent
Tencent false positive removal
TAVfp@tencent.com
TheHacker virus@hacksoft.com.pe, falsopositivo@hacksoft.com.pe
thirtyseven4 analyze@thirtyseven4.com?subject=False%20Positive%20Submission&body=The%20sample%20is%20in%20a%20password%20protected%20zip%20file%0A%0AThe%20password%20for%20the%20attachment%20is%20infected
Trapmine
Trapmine false positive removal
fp@trapmine.com
TrendMicro
Trend Micro false positive removal
https://www.trendmicro.com/en_us/about/legal/detection-reevaluation.html
virus@trendmicro.com, virus_doctor@trendmicro.com
http://esupport.trendmicro.com/solution/en-us/1037634.aspx
Trojan Remover
Trojan Remover false positive removal/Simply Super Software
support@simplysup.com?subject=False%20Positive%20Submission&body=The%20sample%20is%20in%20a%20password%20protected%20zip%20file%0A%0AThe%20password%20for%20the%20attachment%20is%20infected
Trustlook
Trustlook false positive removal
bd@trustlook.com
TrustPort
TrustPort false positive removal
support@trustport.com?subject=False%20Positive%20Submission&body=The%20sample%20is%20in%20a%20password%20protected%20zip%20file%0A%0AThe%20password%20for%20the%20attachment%20is%20infected
Trustwave
Trustwave (now LevelBlue) false positive removal
ADavidi@trustwave.com
Untangle https://www.techsupportalert.com/how-to-report-malware-or-false-positives-to-multiple-antivirus-vendors/#Immunet_Protect
VBA32
VBA32 (VirusBlokAda) false positive removal
feedback@anti-virus.by
Verizon Internet Security https://www.techsupportalert.com/how-to-report-malware-or-false-positives-to-multiple-antivirus-vendors/#McAfee
VIPRE
VIPRE false positive removal
https://www.vipre.com/support/submit-false-positive/
Vir.IT
Vir.IT eXplorer (TG Soft) false positive removal
http://www.tgsoft.it/english/file_sospetti_eng.asp
VirIT https://www.tgsoft.it/clienti/inviaFile.asp
ViRobot viruslab@hauri.co.kr
VirusBlokAda/VBA32 feedback@anti-virus.by?subject=False%20Positive%20Submission&body=The%20sample%20is%20in%20a%20password%20protected%20zip%20file%0A%0AThe%20password%20for%20the%20attachment%20is%20infected
VirusDie
Virusdie false positive removal
partners@virusdie.com
VIRUSfighter https://www.techsupportalert.com/how-to-report-malware-or-false-positives-to-multiple-antivirus-vendors/#Sophos
Webroot
Webroot (BrightCloud) false positive removal
https://www.webroot.com/us/en/business/support/vendor-dispute-contact-us
https://www.webrootanywhere.com/servicewelcome.asp
Xvirus
Xvirus false positive removal
http://xvirus.net/submit.html
Yandex
Yandex Safe Browsing false positive removal
yandex-antivir@support.yandex.ru
Yomi
Yomi (Yoroi) false positive removal
yomi-false-positives@yoroi.company
Zemana https://www.techsupportalert.com/how-to-report-malware-or-false-positives-to-multiple-antivirus-vendors/#Emsisoft
https://www.techsupportalert.com/how-to-report-malware-or-false-positives-to-multiple-antivirus-vendors/#G_Data
https://www.techsupportalert.com/how-to-report-malware-or-false-positives-to-multiple-antivirus-vendors/#Ikarus
https://www.techsupportalert.com/how-to-report-malware-or-false-positives-to-multiple-antivirus-vendors/#Dr._Web
Zillya
Zillya false positive removal
virus@zillya.com
antivirus@zillya.com
ZoneAlarm
ZoneAlarm (Check Point) false positive removal
zonealarm_VT_reports@checkpoint.com
https://opentip.kaspersky.com/
ZoneAlarm/Check Point https://www.techsupportalert.com/how-to-report-malware-or-false-positives-to-multiple-antivirus-vendors/#Kaspersky
Zoner
Zoner false positive removal
false@zonerantivirus.com

How to Remove a False Positive From Popular Antivirus Vendors

Each antivirus and blacklist service has its own process for clearing a false detection. Here are the ones people ask about most:

Gridinsoft False Positive

If Gridinsoft Anti-Malware is flagging your website or file by mistake, submit it for re-review through Gridinsoft’s official incorrect-detection form at gridinsoft.com/incorrect-detection (the old anti-malware.gridinsoft.com/false-detect path is deprecated). Include your URL and the exact detection name so their team can clear the Gridinsoft false positive quickly — step-by-step details in the Gridinsoft false positive removal guide.

VIPRE False Positive

To report a VIPRE false positive, use VIPRE’s submission form at vipre.com/support/submit-false-positive/ and provide the flagged URL or file so it can be re-evaluated. Full walkthrough in the VIPRE false positive removal guide.

AegisLab Blacklist Removal

For an AegisLab false positive or blacklist removal, email support@aegislab.com with your site URL and the detection details to request delisting.

Not sure if it is really a false positive? Sometimes the warning is real. If your site is genuinely infected, DrGlenn offers fast, expert WordPress malware removal — read client reviews or order a cleanup to get your site clean and delisted.

Not a False Positive? Your Site May Really Be Hacked.

If the warning is real and your WordPress site is infected, you do not have to fight it alone. DrGlenn removes real malware, clears the blacklist, and hardens your site so it does not happen again.

Get My Site Cleaned

Stuck getting your site delisted? Tell me which blacklist flagged you and I’ll help you get it cleared.

Get in touch →

Not sure what your detection label means?

Some warnings name a vendor. Others name a label that explains nothing on its own. These are the ones that send most people here, and each has a guide of its own covering what it means and how to clear it.