Bfore.ai False Positives: Clean Sites Predicted as Malicious
On 27 October 2026 I found that Bfore.ai's PreCrime engine flags two of my sites, aiwebpageseo.website and aiwebpageseo.shop, as malicious on VirusTotal. Both are single-page sites built from my main site, aiwebpageseo.com, and they describe and link to free SEO, AEO and schema audit tools.
PreCrime is, as its name says, a prediction. It is not a report of anything found on a site. But other services do not treat it as a prediction. ScamAdviser shows it on aiwebpageseo.website as "This website has been reported as malicious by Bfore.ai", and Gridinsoft counts it as a warning when it labels aiwebpageseo.shop a "Malware Distributor". A guess about what a domain might do ends up shown to the public as a finding that it is malicious.
This post sets out what Bfore.ai says, the facts, and the links that prove them. Anyone can check every link for themselves.
aiwebpageseo.website: 1 vendor out of 92
Bfore.ai says: Bfore.Ai PreCrime, Malicious.
The facts: Bfore.ai is the only vendor out of 92 on VirusTotal that flags aiwebpageseo.website. 55 vendors report it clean, including Google Safe Browsing, Kaspersky, ESET, Sophos, BitDefender and Fortinet. VirusTotal: aiwebpageseo.website
IPQS, whose old reports ScamAdviser also shows against this site, now gives it a risk score of 0 on its own scanner, with phishing, malware, spamming and suspicious all false.
Gridinsoft rates the site 71 out of 100 and says it "appears to be generally safe". The single warning on its report is the Bfore.ai verdict.
ScamAdviser still rates the site 31 out of 100, "Likely Unsafe", and lists "reported as malicious by Bfore.ai" as a reason. Its page has not been updated for five months, and its "Update score" button failed on every attempt. ScamAdviser: aiwebpageseo.website
aiwebpageseo.shop: a prediction counted as a detection
Bfore.ai says: Bfore.Ai PreCrime, Malicious.
The facts: 55 vendors on VirusTotal report aiwebpageseo.shop clean, including URLhaus and VX Vault, which exist to track malware distribution sites. VirusTotal: aiwebpageseo.shop
ScamAdviser rates it 100 out of 100, "Very Likely Safe", from a fresh scan on 27 October 2026. ScamAdviser: aiwebpageseo.shop
Gridinsoft counts the Bfore.ai prediction as one of four "blacklist detections" and on that basis calls the site a "Malware Distributor" with a trust score of 1 out of 100. There is nothing on the site to distribute: no executables, installers, archives or server scripts of any kind. See Gridinsoft False Positives: Clean Sites Listed as Malicious.
What is on these sites
I checked every file on both sites on my server on 27 October 2026.
- No forms, logins or payment pages, and no way of collecting any data.
- No executables, installers, archives or server scripts (.exe, .msi, .zip, .rar, .7z, .apk, .dmg, .bat, .scr or .php).
- No hidden or obfuscated code (eval, atob, unescape or fromCharCode).
- No iframes, no redirects and no link shorteners.
- The only external scripts load from my own main site, aiwebpageseo.com.
Bfore.ai contradicts itself
These sites are near-identical single-page sites built from the same main site (up to 97.6% the same once the domain names are ignored), on the same server, registered within a day of each other. On VirusTotal, Bfore.ai rates them like this:
- aiwebpageseo.com, the main site they are built from: Clean
- aiwebpageseo.store: Unrated
- aiwebpageseo.website: Malicious
- aiwebpageseo.shop: Malicious
The same pages cannot be clean on one domain and malicious on another. A prediction that gives opposite answers for the same content is not telling anyone anything about the content.
A guess repeated as a fact
Bfore.ai's verdict is published on VirusTotal next to real detections, with nothing to show that it is only a prediction. ScamAdviser and Gridinsoft then repeat it to the public as a report that my sites are malicious.
Bfore.ai is happy to tell the world that my sites could be malicious, without a single piece of evidence. By the same standard, its predictions could be malicious. I do not know whether this is negligence or something worse, but the effect on my business is the same: my sites have been publicly branded as malicious without a shred of proof, and my reputation has been seriously damaged.
What I have asked Bfore.ai to do
I have submitted false positive requests through Bfore.ai's support form, the contact VirusTotal lists for Bfore.ai false positives, for both domains, and asked Bfore.ai to remove the malicious classification from aiwebpageseo.website and aiwebpageseo.shop. I can provide proof of ownership on request. I will update this post with Bfore.ai's reply.
Timeline
- 27 October 2026, by 12:21 GMT: false positive requests submitted on the Bfore.ai support form for aiwebpageseo.shop and aiwebpageseo.website, under "False Positive/Domain Wrongly Classified".
If Bfore.ai has flagged your site
Go to bfore.ai/support, choose "False Positive/Domain Wrongly Classified", enter your domain and describe the site. Before you do, check your site on VirusTotal and note how many vendors report it clean. If Bfore.Ai PreCrime is the only one flagging you, say so, and point out that PreCrime is a prediction rather than a detection.
Other false positive contacts are on VirusTotal's false positive contacts page. The Webroot side of the same story is here: Webroot False Positives: Three Clean Sites Rated as Phishing.
- 27 October 2026, 12:51 GMT: VirusTotal reanalysed aiwebpageseo.website. It now shows 0 of 92 vendors flagging it, with Bfore.Ai PreCrime rated Clean.
Frequently asked questions
What is Bfore.Ai PreCrime on VirusTotal?
Bfore.Ai PreCrime is one of the engines whose verdicts appear on VirusTotal. As its name says, it predicts which domains may be used for attacks, rather than reporting something found on a site. Its verdicts are shown on VirusTotal next to real detections from other vendors, so a prediction can look like a finding. In this case it marked two clean single-page sites as malicious while rating the main site they are built from as clean.
Why is my site flagged by Bfore.ai when every other vendor says it is clean?
A prediction is based on signals about a domain, such as its age, its name and how it was registered, not on what the pages contain. That is why near-identical pages can be rated clean on one domain and malicious on another. If Bfore.Ai PreCrime is the only vendor out of more than 90 flagging your site, and the rest report it clean, that is a strong sign of a false positive that you should challenge.
How do I get a Bfore.ai false positive removed?
Use the support form at bfore.ai/support, which is the contact VirusTotal lists for Bfore.ai false positives. Choose the issue type for a false positive or wrongly classified domain, enter your domain and give a short description of the site. Include your VirusTotal link, say how many vendors report the site clean, list what the site does and does not contain, and offer proof that you own the domain.
Does a Bfore.ai verdict affect other reputation sites?
Yes. ScamAdviser shows it to the public as "reported as malicious by Bfore.ai" and lowers the site's trust score, and Gridinsoft counts it as an external warning when it rates a site. In this case Gridinsoft used it as one of four warnings to label aiwebpageseo.shop a Malware Distributor. One prediction on one engine can therefore spread across several sites that the public use to decide whether a business is safe.