Last active
September 7, 2026 09:33
-
-
Save skmedix/6cdce9d6d3b464c1bd719b72d1f6bce4 to your computer and use it in GitHub Desktop.
Antiviruses False-Positives Report Emails
Adding our case to the documented pattern of Dr.Web Virus Monitoring Service non-engagement.
Timeline:
- 2026-05-27: Sent detailed false-positive report for 22 German-language adult dating chat platforms (Yellow Connectivity B.V., Dutch registered).
- 2026-05-27 15:05 same-day: Received single-sentence template rejection from vms@drweb.com: "Your request has been analyzed. This is not a false positive."
- 2026-05-27 follow-up: Submitted substantive 5-question response asking for technical indicators, trigger event, and category-vs-malicious clarification, with 10-business-day deadline.
- 2026-06-10: Deadline expired. Zero further communication from Dr.Web.
Pattern across 38 affected domains: Dr.Web is the single outlier engine in 30 cases — every other major AV/URL classifier on VirusTotal returns clean. Statistical pattern points to category-policy labelling (adult content) misapplied as "Malicious".
Escalated to VirusTotal support@virustotal.com and to sales@drweb.com / commercial channel 2026-06-11.
Will update this comment with resolution if and when it materialises. Other vendors with similar issues — happy to compare notes.
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Hi friends, I submitted some reports to AdminUsLabs. I haven't received a response, but they removed one of my domains and it stopped appearing on VirusTotal.
However, Avast / AVG / Avira / Norton are still reporting me =/
I looked into this after they started reporting it to me. And so far, nothing.
The problem is that my SaaS has subdomains per tenant, and this is impacting all of our tenants.
Example:
Does anyone know a quick way to solve this?