VENDOR APPEAL GUIDE
CRDF false positive?
Here’s where to start.
CRDF has a dedicated review form for clean URLs or domains that appear incorrectly classified.
Appeal contacts
Choose a channel for the type of detection you want reviewed. Contact availability and acceptance are controlled by the vendor.
Request a false-positive reviewOpen submission page · Website / URL↗
Source: Vendor / project documentation · Guidance checked
How to request a review
Website / URL review
CRDF has a dedicated review form for clean URLs or domains that appear incorrectly classified.
- Check the exact indicator in CRDF Threat Center before requesting a review.
- Provide an HTTP or HTTPS URL, a reachable email address, and a reason describing the incorrect classification or what changed.
- Include affected URLs, cleanup dates, and supporting evidence. Keep the tracking link and add follow-up information to the existing case.
- Duplicate active requests are not created. The form currently supports up to five URLs per submission.
Names you may see in a report
CRDFCRDF FRANCEcrdf
Aliases help locate the responsible vendor. Related products can use different submission channels; check the scope shown above.
Sources for this entry
- VirusTotal contributor roster ↗
- VirusTotal network engine prefixes ↗
- VirusTotal official false-positive contact list ↗
- CRDF false-positive review procedure ↗
“Guidance checked” means a public vendor source supports the route or instructions. We have not sent a test appeal or verified mailbox delivery. Read our methodology.