Unblocking A Website

Did you look at the detailed report for that site?  https://safeweb.norton.com/report/show?url=www.4taktaraneh.org

The detection is for PUA.JScoinminer as shown at the bottom of this image. Have the developer check his site again, looking for this file.

Your reporting to Norton about a possible false positive is the best you can do for now. I too am not a programmer, so I could not comment on the necessity for that file. 

But do you want to take the chance before getting a response from your false positive submission?  Here is Symantec's write up on PUA.JScoinminer    https://www.symantec.com/security_response/writeup.jsp?docid=2017-091515...

The fact that you submitted that site to virustotal and there were no other detections, is a good indicator that this may be a false positive.

I have just submitted a false positive report. Lets see who gets a response first.

EDIT

From my confirmation email...

Submission of incomplete information may result in a delay of the final determination.

It is possible that you may have missed something in your submission that is causing a delay. Time will tell.

Hello Pitbull2020

I will submit this to the Safe Web Team who handles this.

Please stay tuned to this thread for a response on either Sunday or Monday night after midnight EST.

Have A Good Night and

Thanks.

I did submit the site with the link you gave and got this reply at 6:22 am this morning. floplot has other channels to help with Safe Web issues.

The Norton Safe Web Team has re-evaluated your submission to the block page False Positive site. Our analysts have re-evaluated the issue of the suspected false positive site:4taktaraneh.org.

The result of this re-evaluation is a change in the Norton Safe Web rating for this site.

  • Old Rating: UNSAFE
  • New Rating: SAFE

For details about this site report, you can go to:http://safeweb.norton.com/report/show_mobile?url=4taktaraneh.org

For additional information, please visit: http://safeweb.norton.com/help/site_owners

Regards,
Norton Safe Web Team

So not sure if it was my submission that got it changed or if @floplot's contacts were able to help with the analysis of the site.

Hello

If it were my contact, the Safe Web Team would have posted in the thread. The False Positive Team has to contact Safe Web to get the information. I can do it directly with Safe Web.  The wording that peterweb quoted is from False Positive. I had mentioned that it was submitted to False Positive. So it was both of us.

Have a Good Night and

Thanks.

EDIT: The important thing is that the site is now marked as Green OK. It really doesn't matter if peterweb was successful or that I was successful in getting it changed. Perhaps it was your own submission. False Positive does have to go through Safe Web, so Safe Web is involved.

Hi Pitbull2020

Your site '4taktaraneh.org' had been submitted for analysis and is currently rated green in safeweb.norton.com.

Cops

Pitbull2020

The Consol_Ops is not one user but a team. They do not get the false positive submissions directly, because the same link can be used for a false positive malware detection. Where ever the FP submissions go, they are triaged and then sent on the the appropriate departments. So Consol_Ops cannot answer any question about your specific submission.

Also, they do not monitor the forums directly. Users here, mostly @floplot, help out by checking that the initial steps have been taken to register the web site with Norton, and if all is ready to be checked, she will contact the Safe Web team through her connections.

We are not employees or affiliated in any way with Norton.

Hello

Almost correct. Using the False Positive form for websites is what slows down the process. False Positive form is supposed to be used for files that are marked as malicious, but they are not malicious.

If a website is blocked as being malicious when it isn't, then that is supposed to be handled by Safe Web after going thru a process to get the website registered first.

Sending a website to False Positive slows down the process because  False Positive then has to send the website to Safe Web to get the results and then they have to notify False Positive.

Thank you peterweb for your response to Pitbull

Have a Good Night and

Thanks.

Hello Pitbull

Since you are not the owner of the website, I can send the request directly to Safe Web Team. If anyone other than the owner of the website thinks the blockage is incorrect, they just have to post that complaint here and I would have taken care of it. I don't think using False Positive in the case of websites is the proper way of handling it. I'm not a Norton Employee, but that's my understanding. False Positives are used for bad files. It seems to be more direct to send it directly to Safe Web. That's just the way I learned how to handle it. I'm not the one to make up the rules though, so no arguments from me. There isn't currently a form made up for users to directly notify Safe Web that I know of.

Have a Good Night and

Thanks.

https://submit.symantec.com/false_positive/

Hello bjm

Not being argumentative, but I don't see those choices when I click on the link you gave.. My choices are marked A and yours are C?

Have a Good Night and

Thanks.

floplot:

Hello bjm

Not being argumentative, but I don't see those choices when I click on the link you gave.. My choices are marked A and yours are C?

Have a Good Night and

Thanks.

try A4 with Next > B5 with Next > C7 with Next > https://submit.symantec.com/antifraud/false_positive.cgi

we have a form ....as to whether the form should be used and as to whether the form works.....is ?

Pitbull2020:  Thank you for your comment, bjm_

I EXACTLY went thru these options and submitted 2 forms already (before creation of this topic).
The interesting thing about this, is that I did NOT receive any response from them UNTIL RIGHT NOW!!!

we have a form ....as to whether the form should be used and as to whether the form works.....is ?