Why would a website appear as malware in an IP scan?
This article applies to all active MetaDefender Cloud license holders - whether your product is paid for or issued for evaluation purposes.
MetaDefender Cloud does not directly assess IP addresses. Instead, it provides a standardized interface for multiple leading IP and domain reputation sources.
MetaDefender Cloud’s IP Scan functionality utilizes data from +/- 30 verified 3rd party IP reputation sources. MetaDefender Cloud aggregates this data and matches IP addresses against it.
If one of our 3rd party IP reputation sources flags a website as Malicious, MetaDefender Cloud will report it as such.
Because the potential maliciousness of IP addresses and domains is subject to frequent change, we minimize false positives through consistent updating of our aggregate data.
Since our customers depend on Metadefender Cloud to accurately report the findings of our verified 3rd party sources, we (OPSWAT) will not overwrite these results with our own interpretation.
In the event that a website is flagged as Malicious, the owner or administrator will need to contact the relevant IP reputation source(s) directly with queries or to determine the best course of action for resolution of the problem.
For links to our range of verified IP reputation sources, Read This.
For queries or concerns regarding MetaDefender Cloud’s IP Scan Functionality, please open a Support Case with the OPSWAT team via phone, online chat or form, or feel free to ask the community on our OPSWAT Expert Forum.