False Positive DeskBuild an appeal
VENDOR APPEAL GUIDE

ESET false positive?
Here’s where to start.

ESET false-positive review channels for websites / URLs and files and rules. Find contact scope, review guidance, source links, and any limits to the available process.

Vendor guidance checkedSources reviewed: 2026-10-14FileDetection rulesWebsite / URL

Appeal contacts

Choose a channel for the type of detection you want reviewed. Contact availability and acceptance are controlled by the vendor.

How to request a review

Website / URL review

ESET Research Lab accepts blocked-website and website false-positive reports by email.

  1. Send a plain-text email to [email protected] with a subject beginning Domain whitelist followed by the blocked domain.
  2. Put the complete blocked URL in the message, explain why the detection appears incorrect, and include relevant site or software context.
  3. Attach a screenshot of the blocking notification when available.
  • ESET asks for no unrelated links, email addresses, inline images, or email signature/footer in the message.
  • Web Control or Parental Control category errors have a separate form linked from the same support article.

File review

General preparation checklist. A separate vendor-specific workflow for this report type has not been independently checked.

  1. Record the file SHA-256, filename and exact detection label.
  2. Use a listed contact that accepts this indicator type. If the listed route handles a different type, ask the vendor or project for the responsible review team.
  3. Explain why the detection appears incorrect and include supporting evidence. Follow the recipient’s instructions before sending a sample.

Detection rules review

General preparation checklist. A separate vendor-specific workflow for this report type has not been independently checked.

  1. Record the rule identifier, matched indicator and the report URL.
  2. Use a listed contact that accepts this indicator type. If the listed route handles a different type, ask the vendor or project for the responsible review team.
  3. Explain why the detection appears incorrect and include supporting evidence. Follow the recipient’s instructions before sending a sample.

Scope & contact notes

  • VirusTotal does not specify an indicator type for this contact. Confirm that the recipient handles your exact file, URL or rule result.

Names you may see in a report

ESETEset SoftwareESET-NOD32eseteset_nod32nod32

Aliases help locate the responsible vendor. Related products can use different submission channels; check the scope shown above.

Sources for this entry

“Guidance checked” means a public vendor source supports the route or instructions. We have not sent a test appeal or verified mailbox delivery. Read our methodology.

← Back to all vendors