False positive of domain workdrive.zohopublic.eu

  • 13 May 2022
  • 1 reply
  • 264 views

We, Zoho WorkDrive are a Cloud based Content Collaboration Software provided by Zoho Corporation; check this link - https://www.zoho.com/workdrive/ for more details. Our product has a feature which allows files/folders uploaded to WorkDrive and can be shared to everyone on the internet by generating an external link for the file. These links are hosted in a domain https://workdrive.zohopublic.eu owned by ZohoCorporation. and is used for file preview.

The domain "workdrive.zohopublic.eu" is now listed in Webroot as malicious - https://www.virustotal.com/gui/url/578f2c41f827d53ecec3fae43352ac8bce0faf12d89f36e79a683f42b5064de1 . Some of our customers complained about accessing public WorkDrive files. We noticed the blacklist, since the domain is used by a large number of customers a blanket ban is hurting our customers.

  

Here are the steps we perform to ensure that malware content does not get hosted from Zoho WorkDrive 

      1. We have an Anti Virus scan in place which validates the files during upload. This ensures that most malware cannot be uploaded to the cloud at all, if the file is positively identified as malware.

      2. We also have a spam and fraudulence detection algorithm in place which identifies if the uploaded files are phishing documents.

This means most spamming documents get filtered out and virus files never get published.

We also regularly monitor abuse complaints from our customers to ensure that the few links that were missed to be captured by our mitigation steps are duly pulled down. Despite our best efforts to identify virus/spam files and spammers/malicious users; a few spam files do get published from WorkDrive and in such unfortunate instances the entire domain gets blocked. 

We request you to delist the domain in Webroot and permanently classify the domain owned by us as a Content Collaboration Software. Please feel free to write back to me or support@zohoworkdrive.com for any further clarifications.


1 reply

Userlevel 7
Badge +25

@chandramathi 

 

I have already submitted this to our Web classification team and they should have it fixed and unblocked shortly.

 

For future reference, you can submit for reputation change here 

https://www.brightcloud.com/tools/url-ip-lookup.php#

Reply