Report a sample · ISPProtect

What are you reporting?

False positive ISPProtect flagged this file, but it is a legitimate part of a CMS, plugin or your own code. Missed malware ISPProtect did not flag this file, but you are sure it is a webshell, backdoor or other malware.

The files

Up to 10 files per submission, at most 2M each. Pack whole directories into a .zip or .tar.gz archive.

Drop files here or click to browse Nothing is executed — samples are stored offline for analysis.

Your license

License key Your ISPProtect license key. It has to be active and not expired. Your email optional Only used if an analyst needs to ask you something about this sample.

Anything we should know? optional

Processing consent

Samples are kept for analysis, are never executed and are used only to improve the ISPProtect signatures.

Do not upload personal data. Every submission is logged with your IP address and license key so we can follow up on abuse.

What happens next

Re-scan Your file runs against the current signature set.
Automated review If the result still disagrees with your report, AI models analyse the file.
Analyst Everything that is genuinely new lands on our analysts' desk and feeds the next signature update.

Where your file goes

The sample is stored on this server, re-scanned locally and — if the scan result still disagrees with your report — sent to AI models through OpenRouter for a second opinion. Those providers are located outside the EU. Nothing else is passed on.

Prefer the command line?

The scanner submits samples itself. Both commands need --confirm-file-upload, which is your consent to upload the complete file:

malware-scan --false-positive /path/file \
    --email you@example.com \
    --confirm-file-upload

malware-scan --report /path/file \
    --email you@example.com \
    --confirm-file-upload

This form uses the very same intake.

Send us a sample our scanner got wrong