EmergingThreats listed your domain. We handle the removal.
About the vendor
Emerging Threats, now part of Proofpoint, is one of the most foundational threat intelligence projects in the security industry. They provide open-source and commercial IDS/IPS rules for Snort and Suricata, the two most widely deployed network intrusion detection systems, as well as domain and IP blocklists. Their intelligence is embedded in enterprise network security appliances, next-generation firewalls, and open-source security tools used by millions of organizations worldwide.
An Emerging Threats listing can trigger IDS/IPS detection rules and automatic firewall blocks across an enormous number of corporate and government networks globally. Because their rules are embedded in open-source IDS engines used everywhere from small businesses to national governments, the reach of a single ET listing is virtually unbounded.
Common causes
From our own case data
Not enough data yet for median days to removal, removal success rate, most common reason and last delisting date.
We have not handled a EmergingThreats removal case yet. We only show a removal figure once we have at least 5 cases.
Removal at a glance
Last updated
Complete removal guide
This step works the same way for every vendor, so the full instructions are in our VirusTotal false positive guide. Read the full step
This step works the same way for every vendor, so the full instructions are in our VirusTotal false positive guide. Read the full step
Email support@emergingthreats.net. Subject: "False positive: example[.]com" plus your reference. Plain text, no links or attachments, domains defanged. Give the URL(s), VirusTotal label, what the site does, why the verdict is wrong and what you fixed. EmergingThreats is Proofpoint's open ruleset and reputation feed. Specify whether the hit is a domain, URL or IP.
This step works the same way for every vendor, so the full instructions are in our VirusTotal false positive guide. Read the full step
This step works the same way for every vendor, so the full instructions are in our VirusTotal false positive guide. Read the full step
The evidence checklist, follow-up routine and checks after removal are the same for every vendor. We keep them in one place so this page can focus on what is specific to EmergingThreats.
Read the VirusTotal false positive guideFAQ
We check that your site is clean, send EmergingThreats the evidence it needs through its official channel and follow up until the flag is gone. You only pay once the removal is confirmed, and the full process for 90+ vendors is explained on our website blacklist removal page.
Picked for the same vendors and the same kind of problem.
Ask AI
Open this page in your favourite AI assistant with a ready-made question, and ask follow-ups about your own domain.