CRDF flagged your domain. Our team handles the removal.
About the vendor
CRDF (Cyber Research and Defense Foundation) provides URL and domain reputation data used in enterprise web security gateways and content filtering products. Their threat intelligence focuses on phishing URLs, malware hosting, and dangerous content categories, and is licensed to enterprise security vendors for integration into web filter rule sets and endpoint protection products.
CRDF data feeds into enterprise web filtering appliances used across corporate networks. A flag silently prevents employees at affected companies from accessing your domain, with no browser warning visible to them, just a filtered connection.
Common causes
From our own case data
Based on 31 removal cases we handled. We only show a removal figure once we have at least 5 cases.
Removal at a glance
Last updated
Complete removal guide
On VirusTotal, confirm CRDF flags your URL or domain and note the label and scan date. Check the vendor lookup too: https://threatcenter.crdf.fr/. Click Reanalyze first; stale cached verdicts are common.
This step works the same way for every vendor, so the full instructions are in our VirusTotal false positive guide. Read the full step
Use the CRDF Threat Center false-positive form at https://threatcenter.crdf.fr/false_positive.html. No login; requires your email address and a reason. Enter the exact URL(s), pick the correct category if asked and say why the verdict is wrong. Save the confirmation or ticket number. CRDF rate-limits the form after roughly 13 submissions per hour and rejects duplicate requests while one is active. Keep the tracking link from the confirmation and reply there instead of resubmitting.
This step works the same way for every vendor, so the full instructions are in our VirusTotal false positive guide. Read the full step
This step works the same way for every vendor, so the full instructions are in our VirusTotal false positive guide. Read the full step
The evidence checklist, follow-up routine and checks after removal are the same for every vendor. We keep them in one place so this page can focus on what is specific to CRDF.
Read the VirusTotal false positive guideExpert knowledge
FAQ
We check that your site is clean, send CRDF the evidence it needs through its official channel and follow up until the flag is gone. You only pay once the removal is confirmed, and the full process for 90+ vendors is explained on our website blacklist removal page.
Picked for the same vendors and the same kind of problem.
Ask AI
Open this page in your favourite AI assistant with a ready-made question, and ask follow-ups about your own domain.