ViriBack false positive?
Here’s where to start.
ViriBack's maintainer publishes [email protected] in a public PGP key on Keybase. The Keybase profile links the official domain and Twitter identity. This is a published maintainer email; no dedicated VirusTotal appeal process was verified.
Appeal contacts
Choose a channel for the type of detection you want reviewed. Contact availability and acceptance are controlled by the vendor.
How to request a review
Website / URL review
ViriBack's maintainer publishes [email protected] in a public PGP key on Keybase. The Keybase profile links the official domain and Twitter identity. This is a published maintainer email; no dedicated VirusTotal appeal process was verified.
- Use the published maintainer email to ask whether ViriBack accepts a correction request and which channel should receive it.
- Suggested details: the exact URL or IP, the VirusTotal report link, the detection date, and a concise explanation of the suspected mistake or completed cleanup.
- The maintainer's Keybase profile also offers a chat option. Its acceptance of false-positive requests is unconfirmed.
- The email comes from the maintainer's public-key identity, not an advertised support or false-positive inbox. Delivery, monitoring and appeal acceptance have not been tested.
- A public profile or key does not establish that the VirusTotal engine is currently active.
Scope & contact notes
- Listed in VirusTotal search-prefix documentation but absent from the contributor roster snapshot; this is not proof the engine is currently active.
- This name appears in a VirusTotal engine-prefix list or contact table but is not matched to a current contributor entry. Current engine activity is unconfirmed.
- The maintainer publishes [email protected] in a public PGP identity associated with the official domain through a matching DNS proof. This is a general maintainer contact, not a dedicated false-positive inbox; delivery, monitoring and acceptance of requests are unconfirmed.
Names you may see in a report
Aliases help locate the responsible vendor. Related products can use different submission channels; check the scope shown above.
Sources for this entry
- VirusTotal netloc engine search prefixes ↗
- ViriBack Blog: Official maintainer profile link ↗
- ViriBack C2 Tracker ↗
- ViriBack Keybase profile and identity proofs ↗
- Maintainer-published PGP public key ↗
- Keybase public identity metadata ↗
- Research evidence: dns.google ↗
- Research evidence: viriback.com ↗
“Guidance checked” means a public vendor source supports the route or instructions. We have not sent a test appeal or verified mailbox delivery. Read our methodology.