False Positive: Site (Detected as Malicious/Spam)

[Semenovi4]

Hello,

My website https://intimchat.org is currently flagged as "Malicious" or "Spam" by the Kaspersky engine on VirusTotal.

Context:
The site was previously affected by a third-party malicious script (ntvpforever.com), which caused the detection. I have performed a complete security audit, and the malicious code has been entirely removed.

Verification:

1. Google Search Console: No security issues found, the site is clean.
2. SOCRadar Cyber Intelligence: Already re-evaluated and cleared the domain
3. Current state: The site is safe, no redirects or phishing.

I have already submitted several requests via OpenTIP (using this account), but the detection remains. Could you please manually re-verify the domain and update its status?

VirusTotal link: [https://www.virustotal.com/gui/url/7723120cd219943527b02ea9c8711933b61bbb93509cb64ff2d5a594524079bc?nocache=1]

Thank you!

[Berny]

@Semenovi4 Welcome on the Kaspersky Forum.

Your URL has been submitted to Kaspersky Virus Lab , the verdict will be provided when available.

 

 

[Berny]

@Semenovi4

↓ Kaspersky detections e.g. ↓

Spoiler

 

[wyrmus]

Thank you, Berny. I have manually re-checked the URLs shown in the screenshot. Please note that this is a blog within an adult website, and these are standard text-based posts with no active malicious scripts.

I have also re-saved these pages to clear any server-side cache. Please ask the analysts to perform a deep scan of the page source, as it is currently 100% clean and free of any redirects or phishing. Thank you for your assistance!

 

P.S. Sorry cant login with Semenovi4. Dont know why...

[Berny]

@wyrmus You are welcome

I  submitted now URL "intimchat.org/blog/page/rkn-i-dmca" , but the weird thing is that Kaspersky is detecting all your pages under folder " /blog/page " 🤔. Anyway Kaspersky Virus Lab is  always analysing the full website tree.

Also the verdict becomes usualy available within 30/60 minutes but in some cases  it may take a while.

Spoiler

 

Edited February 24 by Berny
Sreenshot

[Berny]

Quote

" Hello,

URL was removed from blocklist. It will be fixed in the next update.
Thank you for your help.

Best regards, Xxxxxxxx Xxxxxxxx, Malware Analyst
39A/3 Leningradskoe Shosse, Moscow, 125212, Russia Tel./Fax: + 7 (495) 797 8700  "

 

[Berny]

@wyrmus