This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

My website is flagged as malicious


I have a problem with your scanning service, I am a developer from Smart Media International and you marked our site as malicious in virus total, so I want to remove that problem because it is limiting our online services.

The website is:

We have a complete security environment (HTTP/3, SSL SHA256, HSTS, reCaptcha, Page level WAF, Server level WAF + Imunify360 Antivirus, and we are using CloudFlare)

I have been actively updating the core of the website and after seeing this issue I did a full server scan and checked all the website files for SQL injections, modified files or malicious code without getting anything.

So. Why Sophos flag our site as malicious?

This thread was automatically locked due to age.
Parents Reply Children
  • I already did (request a re-categorization), but why should an 'Uncategorized' website be a malicious website? I don't understand, currently some customers don't want our service until that problem is fixed.

    Basically, your security system affects the corporate image of legitimate companies.

    I can't use Sophos Intelix because I'm not a user of Sophos

    Anyway, I would like this problem to be corrected as soon as possible due to the aforementioned.

    Thanks for help

  • Hi Jorge,

    Sophos has not classified your site as malicious. It is uncategorized, meaning we have not even looked at it before, which is why it is uncategorized. Most firewalls (Sophos and others) will allow their customers to block certain categories of websites e.g. gambling, adult, games. They will also have an option of deciding what they want to do with uncategorized websites, by default these would not be blocked, but many companies will choose to block uncategorized sites as the vast majority of websites their users need to use for work will be categorized, while at the same time, new websites that are created for malicious purposes are unlikely to be categorized, so this offers companies an extra level of protection. However, it is the individual companies choice if they want to block uncategorized websites or not, Sophos doesn't control that.

    This should be resolved once the website is categorized appropriately, which I can see the process for that has started and will likely be completed within the next 24 hours.