False positive riskware korostel[dot]one

[the_double_key]

One of our technical domain (korostel[.]one and all subdomains) was mistakenly marked as riskware/malware in Malwarebytes antivirus. Could you please change category to the Non-profit/Advocacy/HumanRights/Legal (or similar) or advise what we can do to remove the riskware/malware category? 

Additionally, it's worth noting that previously, several antivirus companies had marked our domain as phishing on VirusTotal. However, we have systematically reached out to each company to report these as false positives. Consequently, the domain's categorization has been updated, and it is now recognized as safe on VirusTotal.

We believe this to be an error, possibly due to the characteristics of heuristic threat detection algorithms. We recently changed our registrar (from GoDaddy to Gandi) and we hide our information in WHOIS for the security of our team. The domain is used strictly for internal technical services and is not public. It sounds like the name of a bird, "Коростель" (in English transcription it's Korostel), perhaps this is what caused suspicion?

Currently, when trying to access any subdomain, members of our team are facing an issue - their antivirus software is attempting to block the pages, issuing alarming warnings. It would be very difficult for us to reconfigure all services to another domain, as we have been using this domain for several years and, of course, have never used it for phishing or any other malicious activities.

Thank you for your assistance and all the best!
 

[JPopovic]

Hello,

The block will be removed.

Thank you!