centralswissderma.ch blocked by AI-Driven Threat Detection – false positive (cleaned site)
Hello NextDNS team,
I'd like to report a false positive.
Domain: centralswissderma.ch, including www
Blocked by: AI-Driven Threat Detection
Background: The site belongs to Central Swiss Derma AG, a dermatology practice in Meggen, Switzerland. It was compromised in August 2026 (ThreatFox IOC #1880772, ClearFake) and was cleaned and rebuilt as a static HTML site in September 2026. The false positive has already been reported to other security vendors.
Current state, checked on 20 October 2026:
- The site is static HTML. The only third-party scripts are Wistia for the video player and Google Fonts. No ClearFake or web3 injection remains.
- Google Safe Browsing reports no unsafe content.
- The domain resolves normally on Quad9, Cloudflare 1.1.1.2/1.1.1.3, OpenDNS, AdGuard DNS, CleanBrowsing, Control D and DNS4EU Protective.
- The domain is not listed in HaGeZi TIF, URLhaus or the active ThreatFox host file.
The AI-Driven Threat Detection classification appears to be based on the August incident and is no longer accurate.
Could you please review the domain and remove the block so that other NextDNS users are no longer affected?
Thank you!
Best regards
Thomas
Reply
Content aside
- 8 hrs agoLast active
- 8Views
-
1
Following
