topic False positive swll.to in VirusTotal

False positive swll.to

Thibaud — Thu, 09 Nov 2023 13:36:30 GMT

Hi,

Link to Virustotal report for the url: https://www.virustotal.com/gui/url/e86b79a32b0cae3709e55728af3bee319040f5f1b21c7c98cfbb6cf7fde13013/detection

Current VirustTotal Verdict: 1/90

Description: Our domain swll.to has been flagged as a malicious one, this domain is used as a url shortener service like bit.ly and does not host any malicious content. As bit.ly it can redirect to malicious content but those links are deleted as soon as they are detected.

Paloalto is blocking the whole domain, it could be nice to have better granularity.
Could you review it and lower the security risk?

Thanks for your help.

Re: False positive swll.to

JayGolf — Tue, 14 Nov 2023 02:22:45 GMT

Hi @Thibaud ,

You can request a change in https://urlfiltering.paloaltonetworks.com/query/ with the domain in question.

Re: False positive swll.to

Thibaud — Tue, 14 Nov 2023 13:08:17 GMT

Hi @JayGolf
Thanks for the help, nevertheless the link you provided seems to be for a category change not a Risk Level change.