Trend Micro false positive?
Here’s where to start.
Trend Micro false-positive review channels for websites / URLs and files. Find contact scope, review guidance, source links, and any limits to the available process.
Appeal contacts
Choose a channel for the type of detection you want reviewed. Contact availability and acceptance are controlled by the vendor.
How to request a review
Website / URL review
Trend Micro's Site Safety Center supports website safety-rating and category reclassification.
- Check the affected URL in Site Safety Center and choose Reclassify Request.
- Site owners and home users can proceed to URL Reclassification Request; business customers are directed to their support portal.
- Choose the proposed safety rating and category, explain your relationship to the site and the reason for review, and enter your email.
- Confirm the validation link delivered by email to finish the request.
- Business customers use the support case category Threat Issue > URL Reclassification.
- If the product still detects the site after reclassification, Trend Micro asks for the URL and product web-reputation logs through support.
File review
General preparation checklist. A separate vendor-specific workflow for this report type has not been independently checked.
- Record the file SHA-256, filename and exact detection label.
- Use a listed contact that accepts this indicator type. If the listed route handles a different type, ask the vendor or project for the responsible review team.
- Explain why the detection appears incorrect and include supporting evidence. Follow the recipient’s instructions before sending a sample.
Scope & contact notes
- VirusTotal does not specify an indicator type for this contact. Confirm that the recipient handles your exact file, URL or rule result.
Names you may see in a report
Aliases help locate the responsible vendor. Related products can use different submission channels; check the scope shown above.
Sources for this entry
- VirusTotal contributor roster ↗
- VirusTotal file engine prefixes ↗
- VirusTotal official false-positive contact list ↗
- Reclassifying a URL or website in Trend Micro Site Safety Center ↗
- Trend Micro product falsely detects a website ↗
“Guidance checked” means a public vendor source supports the route or instructions. We have not sent a test appeal or verified mailbox delivery. Read our methodology.