I am experiencing a false positive, my file or site should not be detected.

ℹ️

Note on False Positives

Google Threat Intelligence aggregates data from a variety of independent security vendors; it does not produce scanning verdicts or maintain blocklists of its own. Because of this, Google Threat Intelligence cannot modify or remove detections made by third-party antivirus engines or URL scanners.

If your file or website is improperly flagged as malicious, follow these steps to resolve the issue:

1. Re-analyse first: Click the Reanalyse button on your report page. If the vendor has already fixed the detection in their latest signature updates, a fresh scan will reflect the clean status.
2. Dispute directly with the detecting vendor: Because detections originate from individual security engines, you must report the false positive directly to the specific vendor(s) flagging the item. You can find participating security companies on our contributors page to visit their respective portals or submit dispute inquiries.
3. Stale URL cache clearance: We cache some URL scanning results. If detecting vendors have already confirmed to you that the detection was removed, but the URL continues to show as detected after re-analysing, you can contact us via our Support form with evidence of vendor removal so our team can help clear the cache.