Delisting
Request a delisting
IP or domain listed in error? Tell us what was fixed. A person reviews every confirmed request.
Process
How it works. Four steps, decision by email.
- 01
Submit your request
Give the IP or domain, who you are, why the listing is wrong and what you fixed.
- 02
Confirm your email
Click the link we send. Nothing is reviewed before you confirm; the link expires in 24 hours.
- 03
Security review
We check the indicator against current threat feeds, scanner verdicts and exposure data.
- 04
Decision by email
You get the decision with reviewer notes. Approved delistings apply to our API and reports at once.
Request
Submit your delisting request
A person reads every field. Precise requests are decided faster.
FAQ
Delisting questions.
Who can request a delisting?
Anyone responsible for the IP or domain: owners, network administrators or security teams acting for them. We ask for your name, organization and role, and verify your email before any review.
How long does the review take?
Most requests are reviewed within a few business days. Indicators still flagged by several independent sources take longer, because we re-check the evidence first.
What evidence should I include?
What caused the listing and what you did: malware removed, server rebuilt, open service closed, or a change of IP owner. If it was never malicious, explain what it is used for.
Why was my request rejected?
Usually because the indicator still shows malicious signals: other blocklists, malware detections or exposed vulnerable services. Fix the cause, ask the source blocklists to delist it, then submit again.
Can a delisted indicator be re-listed?
Yes. A delisting reflects the state at review time. If feeds report new malicious activity, we can revoke it.
Does delisting remove me from other blocklists?
No. Each source keeps its own listings. An approved delisting stops isMalicious from reporting the indicator as malicious; ask the original sources separately.