Hello,
Bitdefender Antivirus Pro has flagged my website (suadauxanh.com) for suspicious activity and recommends users not to proceed. After submitting a false positive report, their team responded by claiming that the site is compromised and being used for spamming — an assessment I strongly disagree with.
I’ve used Bitdefender AV Pro for many years, but this experience has been extremely disappointing.
I have asked support center to provide specific details or evidence about the compromise or spam usage they identified (for example, URLs, malware samples, headers, or spam payloads), but they do not provide any evidence.
My server is not configured to send email, and no evidence of spam-related activity has been found. Specifically:
- Port 25 (SMTP) is closed, as confirmed by an
nmap
scan. - The PHP
mail()
function is disabled, preventing any scripts from sending email. - No Mail Transfer Agent (e.g. Postfix, Sendmail, Exim) is installed.
- Outgoing SMTP connections are blocked or unavailable.
- The server's IP address and domain are not listed on any major spam or blacklist databases (Spamhaus, MXToolbox, Talos)
- According to Sucuri.net, no malware was found, and their scanner did not detect any threats. This website is not blacklisted on any of the 9 blacklists checked.
- A scan on VirusTotal.com indicates that no security vendors have identified this website as malicious.
- Currently listed 0 times according to MXToolBox.com, except for occasional listings on the UCEPROTECTL3 blacklist caused by flagged IP addresses from internet service providers with poor reputations.
- A check with SpamHaus.org confirms that this website is not listed and has no reported issues.
- According to Talos Intelligence (Cisco), the domain is not on a block list. Additionally, no email activity or associated IP address data was found for this domain.
- Scanned my website with Quttera: No Malicious Content Detected!
All major threat intelligence platforms and security scanners report no current issues with this website. While occasional blacklist flags (such as UCEPROTECTL3) may occur due to external IP reputation, the site itself shows no signs of compromise or malicious behavior.
I believe the detection by Bitdefender is a false positive and request further review or clarification. However, via email (and ticket) Bitdefender support is vague or unhelpful.