1

kdrive.infomaniak.com is (mistakenly?) blocked by the threat intelligence feed

kdrive.infomaniak.com is a hosted version of NextCloud, operated by a Swiss company. Since this morning it seems to be blocked by the "Threat Intelligence" feed. I allow-listed it for myself / my family, but wanted to raise it here, so that you can debug why it ended up being reported in the first place / have it unblocked for everybody.

 

urlscan doesn't report anything suspicious with it: https://urlscan.io/result/388065d4-74ed-4f8a-a236-0799b7a355a6/ (and I've been a happy client with them for years, so I assume that this is a false-positive).

5 replies

null
    • AB31
    • 1 mth ago
    • Reported - view

    Here is also a VirusTotal scan not finding anything suspicious on it: https://www.virustotal.com/gui/url/f830f4b35e457761aa47d592f5a5ff9bf9395c82c8723a989ab7f20062ccfaf9/detection

    • fasstech
    • 1 mth ago
    • Reported - view

    Hi, I also have the same problem, as soon as NextDNS is activated kDrive pauses directly whereas it didn't before...

    • ChrisB
    • 1 mth ago
    • Reported - view

    Hello,

    I work as a developer at Infomaniak and more specifically on the kDrive.
    I would be delighted to get in touch with NextDNS to clarify this situation or to understand what would trigger their protection.

    P.S.: kDrive has no connection with NextCloud and is a service developed entirely in-house.

    • fasstech
    • 12 days ago
    • Reported - view

    Hello, is there anyone on the staff who can solve this problem?

    • AB31
    • 12 days ago
    • Reported - view

    This seems to be solved, since now kDrive also works with the allowlist disabled, but for safety, I'm keeping my allowlist.

Login to reply

Content aside

  • 1 Likes
  • 12 days agoLast active
  • 5Replies
  • 119Views
  • 3 Following