False positive not getting re-evaluated
Hello
Our website was hacked in August and so we got listed as malicious by all the web security providers. We have removed all malicious code and now are trying to get re-evaluated and whitelisted again. F-secure seems to be the security provider by the Swiss telocom Sunrise and being blocked by them is especially hurtful. We have submitted the URL sampe to F-secure with additional information but do not get whitelisted. VirusTotal is already down to 5/90, still working on that one..
Is there anything else we can do regarding asking F-secure for re-scanning our website?
Thanks and best regards
Thomas
homoeopahtie-im-fokus.ch
Answers
-
Hello,
I tried to look up a bit (as an F-Secure user), but did not find corresponding results. Has that changed already?
I mean F-Secure Link Checker (from your screenshot, I think), now, says "Health"-category with "This link hasn’t been fully verified yet. We recommend using caution before proceeding. Even unverified sites can pose risks." and 'Unverified' status.
however…
Is there anything else we can do regarding asking F-secure for re-scanning our website?
Probably not.
Have you used this form - https://www.f-secure.com/en/support/submit-a-sample?
If you've filled in all the fields or options for feedback, then you just need to wait for a response (this can take some time - maybe(?!) up to 30 days, though I generally don't know exactly what determines the duration). They will either give you a verdict or make a recommendation. My usual experience is about re-categorization stuff (so, not like moving from false positive to safe; or from safe to malicious).
Thus, on the other hand, clearing a false positive (or assigning a "malicious" rating) should likely be faster and could happen before a response is received.
One thing to mention - did you submit a correct URL? For instance, in your comment - there is a mistyping.
"ht" vs "th"
// and you can use their official Support Channels as phone call or web-chat: https://www.f-secure.com/en/support as a way to ask about your submission status or some sort of escalating.
// also, if there will be a stuck with process (which is unlikely, probably) - you could try contacting Sunrise Protect support to see what they recommend. I think the report regarding the "false positive" would ultimately be forwarded upstream.
