VENDOR APPEAL GUIDE
ZeroCERT false positive?
Here’s where to start.
ZeroCERT's official About page publishes a general inquiry email. No dedicated false-positive form or documented VirusTotal appeal workflow was verified.
Appeal contacts
Choose a channel for the type of detection you want reviewed. Contact availability and acceptance are controlled by the vendor.
ZeroCERT general inquiries[email protected] · Website / URL↗
Source: Vendor / project documentation · Guidance checked
How to request a review
Website / URL review
ZeroCERT's official About page publishes a general inquiry email. No dedicated false-positive form or documented VirusTotal appeal workflow was verified.
- Email the published general inquiry address and ask for a review of the ZeroCERT classification.
- Suggested details: the exact domain or URL, the VirusTotal report link, the displayed detection, and a concise explanation of why the site is legitimate or what was cleaned up.
- Ask for the correct review channel if the general inquiry team cannot process the request.
- This is a general contact address, not a confirmed dedicated false-positive queue.
- The source page is in Korean.
Scope & contact notes
- Listed in VirusTotal search-prefix documentation but absent from the contributor roster snapshot; this is not proof the engine is currently active.
- This name appears in a VirusTotal engine-prefix list or contact table but is not matched to a current contributor entry. Current engine activity is unconfirmed.
Names you may see in a report
ZeroCERTzerocert
Aliases help locate the responsible vendor. Related products can use different submission channels; check the scope shown above.
Sources for this entry
“Guidance checked” means a public vendor source supports the route or instructions. We have not sent a test appeal or verified mailbox delivery. Read our methodology.