I've been at this for weeks. Called them up and apparently that email address (arcsight-virustotal@microfocus.com) isn't in use anymore. They gave me this other email address over the phone, mfi-cyberresarcsightsales@opentext.com, but haven't gotten a reply there either, and that was weeks ago.

Tried the various contact forms, nothing. Tried reaching out to sales, they say it's a support issue. Support says they can't help since we're not customers. Cool.

The original security vendor who incorrectly classified our website as malicious has since retracted/reclassified, and I've been able to get 10(!) other "security vendors" who simply piggybacked on the first one to revert their classification after the original one did, but ArcSight Threat Intelligence is apparently unwilling to do anything.

Talked to a support guy today, and he was like "Yeah, I think we actually got someone with this issue last week", so they're aware of this, they just don't seem to care, as there's other post asking the same question.

 Reporting false positive for ArcSight Threat Intelligence on VirusTotal.com 

Hi Tarald,

i replied to this on the other post you made. I have my team on it to do the needful.

I appologize for the delay.

MS

Hi Sang,

Virustotal provides the process for reporting. Under normal circumstances my research team checks what comes through via this mail address. Can you provide the IP/URL in question here so i can bring it up with my team?

Thanks and sorry for the inconvenience.

MS

Hi Markus, thanks for your response. Our domain is `lakihelppi.com`, and if we need to contact please use my email address sang@lakihelppi.com.

Thanks again and have a nice day.

Hi Sang,

we triggered the needed investigation and your domain should be showing as good again.

Can you please confirm and tag this thread accordingly?

Thanks,

MS

Thanks Markus Sell , the issue is resolved.

Hi Markus Sell ,

My company is having the same issue. I emailed arcsight-virustotal@microfocus.com, but never received a response. Is there a better place for me to go to report a false positive?

Ahmed

Hi,

Following up here. Have not heard back either from the email address or from this forum. Any guidance on reviewing our domain would be helpful. Thank you.

Ahmed

Hi Ahmed,

can you please provide me the IP/URL in question via a direct message? I have not seen a VT report received which we did not process.

I can probably help with some manual extra efforts but need the URL/IP in question,

Markus

Hi, the URL is flowcode.com.

Thank you, Markus.