Viriback listed your domain as malware infrastructure. We handle the removal.
About the vendor
Viriback is a threat intelligence project that tracks malware distribution infrastructure and command-and-control servers. Their database documents domains and URLs observed in active malware campaigns, and their data is referenced by security researchers and integrated into threat intelligence tooling. A Viriback listing associates your domain directly with malware campaign infrastructure.
Viriback listings are treated as high-confidence malware indicators by security researchers. A domain associated with malware C2 or distribution infrastructure is treated with maximum suspicion, often resulting in immediate blocking across all security tools that consume Viriback data.
Common causes
From our own case data
Not enough data yet for median days to removal, removal success rate, most common reason and last delisting date.
We have not handled a Viriback removal case yet. We only show a removal figure once we have at least 5 cases.
Removal at a glance
Last updated
Complete removal guide
This step works the same way for every vendor, so the full instructions are in our VirusTotal false positive guide. Read the full step
This step works the same way for every vendor, so the full instructions are in our VirusTotal false positive guide. Read the full step
ViriBack's C2 tracker is a researcher-run feed with no published false-positive address or form, and it is not in VirusTotal's vendor contact table. Options: clear upstream sources first (Google Safe Browsing, PhishTank, OpenPhish, URLhaus), which feeds often copy; ask VirusTotal via its contact form for the engine's contact; use any official contact that turns up.
Do not send reports to guessed or unofficial addresses.
This step works the same way for every vendor, so the full instructions are in our VirusTotal false positive guide. Read the full step
The evidence checklist, follow-up routine and checks after removal are the same for every vendor. We keep them in one place so this page can focus on what is specific to Viriback.
Read the VirusTotal false positive guideFAQ
We check that your site is clean, send Viriback the evidence it needs through its official channel and follow up until the flag is gone. You only pay once the removal is confirmed, and the full process for 90+ vendors is explained on our website blacklist removal page.
Picked for the same vendors and the same kind of problem.
Ask AI
Open this page in your favourite AI assistant with a ready-made question, and ask follow-ups about your own domain.