VENDOR APPEAL GUIDE
OpenPhish false positive?
Here’s where to start.
OpenPhish accepts false-positive reports by email and publishes corrections for confirmed errors.
Appeal contacts
Choose a channel for the type of detection you want reviewed. Contact availability and acceptance are controlled by the vendor.
Email a false-positive report[email protected] · Website / URL↗
Source: Vendor / project documentation · Guidance checked
How to request a review
Website / URL review
OpenPhish accepts false-positive reports by email and publishes corrections for confirmed errors.
- Email [email protected] with the affected URL.
- Escape or defang the URL so that mail protection is less likely to block the message.
- Explain the context and why the classification is incorrect.
- OpenPhish states that URLs confirmed as phishing when first discovered are not removed merely because they later change.
- For a confirmed false positive, OpenPhish says it updates its products and submits a verdict correction to VirusTotal.
Names you may see in a report
OpenPhishFraudSenseopenphish
Aliases help locate the responsible vendor. Related products can use different submission channels; check the scope shown above.
Sources for this entry
- VirusTotal contributor roster ↗
- VirusTotal network engine prefixes ↗
- VirusTotal official false-positive contact list ↗
- OpenPhish knowledge base ↗
“Guidance checked” means a public vendor source supports the route or instructions. We have not sent a test appeal or verified mailbox delivery. Read our methodology.