Please Sign In with Norton Account to Ask a Question or comment in the Community
Posted: 01-Mar-2015 | 11:41PM · Edited: 04-Aug-2016 | 5:28PM · 79 Replies · Permalink
Hello,
I've scan my website(www. excelsoft .com) on https://safeweb.norton.com/ and found a computer threat named Malicious Site: Malicious Domain Request 2 there
Can you re-examine my website? Probably mistakenly added on the blacklist (Malicious Site: Malicious Domain Request 2).
www. excelsoft .com
Thank you
Posted: 02-Mar-2015 | 4:58AM · Permalink
Hi ikaexcelsoft,
We have manually analyzed your site 'excelsoft.com' and found it to be clean so we have changed its rating to green.
http://safeweb.norton.com/report/show?url=excelsoft.com
Cops
Posted: 02-Mar-2015 | 5:14AM · Permalink
Ok,.thanks for your service :-)
Posted: 12-May-2015 | 3:46AM · Permalink
Hi alit,
We have manually analyzed your site 'jglcorp.com' and found it to be clean so we have changed its rating to green.
http://safeweb.norton.com/report/show?url=jglcorp.com
Cops
Posted: 08-Jun-2015 | 11:06PM · Permalink
Posted: 09-Jun-2015 | 5:33AM · Permalink
Hi Bobobby,
We have manually analyzed your site 'lo4d.net' and found it to be clean so we have changed its rating to green.
http://safeweb.norton.com/report/show?url=lo4d.net
Cops
Posted: 20-Nov-2015 | 2:06AM · Edited: 20-Nov-2015 | 7:40AM · Permalink
hello
i have also a problem with my web site http:// risque-foudre . fr/ who appear as Malicious Site: Malicious Domain Request 2
could you please analyse it and tell me what is the problem ?
thanks
Posted: 20-Nov-2015 | 2:04PM · Permalink
Hello
If your website reports that malware, then your site has been rated. This is what that malware is.
http://www.symantec.com/security_response/attacksignatures/detail.jsp?asid=24312
Once you have cleaned up your site, I can request the Safe Web Team and then they can rescan it.
If you have already cleaned it up, then please let me know and then I can notify the Team.
Thanks.
Posted: 20-Nov-2015 | 10:53PM · Permalink
thanks for your answer
i perferm a full scan with norton anti virus without detecting anything !
is it possible to bo a false positive ?
how could i know witch file or URL has been detetected by the safe web team ?
thanks a lot
Posted: 21-Nov-2015 | 2:14PM · Permalink
Hello fredericpatron
I just tried to look at your website, but since I am using Google in the USA, I can not find your website listed. However, if you put your website into the Safe Web website and search for it, it now shows the site as untested. Since I couldn't find the website, I couldn't check it out. So I will ask the Safe Web Team to check out the site again. Please check back here on Mon. or Tues. and look for a post in this thread from the Safe Web Team.
I assume you have placed the meta tag on the home page of your site so it is visible. I also assume that your site has had ownership verified.
Thanks.
Posted: 21-Nov-2015 | 10:24PM · Permalink
hello
thanks for your answer
yes i have done ownership verified and it change the classification.
but i want to know and understand, why this web site has been detected with this malware
is it possible to know why norton has detect as this ? (which URL ? wich file ?)
because i scan all the file (php) and i find no trace of this malware.
thank you for your help
Posted: 22-Nov-2015 | 1:34PM · Permalink
Hello fredericpatron
I did leave word that the person who responds should let you know which file is still malicious if any. I think they should respond either late tonight or late Monday night I would think.
Thanks.
Posted: 22-Nov-2015 | 10:51PM · Permalink
Hi fredericpatron,
We have manually analyzed your site 'risque-foudre.fr' and found it to be clean so we have changed its rating to green.
https://safeweb.norton.com/report/show?url=risque-foudre.fr
Cops
Posted: 23-Nov-2015 | 12:59PM · Permalink
Bon Jour fredericpatron
Your site is clean and the rating was changed to green go. I'm glad that you have the green rating now and good luck with the site.
Thanks.
Posted: 24-Nov-2015 | 12:54AM · Permalink
hello
thanks for your answer
i don't understand how it works
could you explain me WHY my web site has been classified has malware ?
is it user claim ?
configuration problem ?
detection infected script ? which url ?
something else ?
thank you for your help
Posted: 24-Nov-2015 | 6:03PM · Permalink
Hello fredericpatron
Your website does not have any malware now. It is clean meaning it has no malware on it. Your site should have a green go icon when you go to Google and I assume also on the other supported Search Engines.
I can't tell you anything about what was on your website. I couldn't see it in Google, but it looks like Cops was able to find the site ok since he's the one who manually tested it. Don't worry about what was there since now you have a clean site. You should just scan it every week and report here any time you do find malware again.
Thanks.
Posted: 04-Dec-2015 | 1:52AM · Permalink
I get the same report for http://graphicworld.cz
I can't find anything that would point to any malicious site there.
Posted: 04-Dec-2015 | 1:38PM · Permalink
Hello
I can tell you the name of the malicious file and the location says the site's name. It is a full size block and was instantaneous . I can ask the Safe Web Team about it, but they are off for the weekend.. With what is going on in this world, I hope that they are safe. The earliest they could reply back in this thread would be late Sunday night my time.
Thanks.
Posted: 05-Dec-2015 | 1:15PM · Permalink
Hello
The name of the malicious file. It is a drive by download. The location is the whole website. Have you heard about the floods in Chennai India? There is a thread here in this section of the Forum.. It was posted by J4E. Unfortunately, the Safe Web Team was based there along with some other Symantec Employees. My contact with the Team hasn't picked up my messages to him since Wed. and we don't know yet what their status is yet. Hopefully, he might be back online on late Sunday night my time. I won't know any more most likely until next week
You can submit your website to www.virustotal.com They can analyze the website also.. Please post back here their results.
Malicious Site: Malicious Domain Request 2
Let's hope and pray for the Best.
Thanks.
Posted: 09-Dec-2015 | 5:58PM · Permalink
Hello Jakub 12
I could see that Google had blocked the site. I checked the Safe Web report for the site and it was the same malware as the other sites. I will report this to the Safe Web Team. However, we do have a problem. The Team works out of Chennai India. That location unfortunately was badly flooded due to a lot of rain. The building they worked in is flooded and it is being pumped out and then I imagine that it will have to be repaired and the electricity will have to be fixed. Hopefully the Team is safe, that's the most important thing.
I am leaving these messages for them, but I don't know how long it will take for them to respond back to the thread. They might be able to work from home once their homes are fixed up also. I've seen some horrible pictures of the area, and it was so bad, I said wow.
I couldn't check for the meta tag like I usually do since the site was blocked. Does the site have the meta tag on the home page and visible? Once I know that has been done, I will leave a message for them.
Thanks.
Posted: 09-Dec-2015 | 10:15PM · Permalink
Hello All
I have heard from the Safe Web Team. They are safe from the floods in Chennai. However, due to lack of electricity in the Office and other damages, it is unknown just when the team will be able to get back to work. The team is hoping it will be soon.
Thanks.
Posted: 11-Dec-2015 | 3:37AM · Permalink
Hi, Can someone please fix the Norton Rating of my site ? www.primarksales.com (Still says page is suspect) Norton please check my Profile, 6 sites in the Past all GREEN / OK (NO PROBLEM) .
The ownership of the current one has been verified but can someone please please remove that "Page is suspect" thing on it ? I've been with Norton for ages (since 2009) and Please refer to my Profile and see the Number of sites with GREEN / OK Rating ....Thank you in advance
Posted: 11-Dec-2015 | 12:47PM · Permalink
Hello justanotherkenny
I just looked at your site. I got a scam insight warning. This warning occurs because you are asking for personal information. It is getting this warning because the site is relatively new to the Norton Community.
I can ask the Safe Web Team about this. However, there has been heavy flooding where they are located in Chennai India. Luckily the Team is safe. They have been pumping water out of the office all week. Then the utilities will have to be restored. Then Norton will be able to check out the damages to the office and make repairs, most likely getting new computers and I guess some office furniture. As of now, I don't have any date of return. The Team is waiting to be able to get back to work..
Probably by the time the Team gets to your site to check it out., it won't be new any more. I will be updating the sites involved when I get more information as to when the Team will be able to start working again. They haven't been able to work since Dec 2nd .
Thanks.
Posted: 14-Dec-2015 | 3:42AM · Permalink
Hi there Floplot,
Thanks for the reply and the taking the time to explain it. I hope you get in touch with the People from there and stay on top of it ...In the Past I've had 6 sites all were OK from Norton ...so they can look at my history and profile ...if you can put in a word, so that they straighten this out after they're up, I'd appreciate it
Thanks again
K
Posted: 15-Dec-2015 | 7:48PM · Permalink
Hello justanotherkenny
Your site was retested and is now rated as clean so the rating was changed to Green Go.
https://safeweb.norton.com/report/show?url=www.primarksales.com
Good luck on your new site.
Thanks.
Posted: 16-Dec-2015 | 5:02AM · Permalink
Hey Buddy, Thanks for the update, but it still shows " Scam Insight: Personal Info Risk" Page.
Does it take a coupla days before it's reset ..OR ...?? Kinda confused here 
Thanks Man
Posted: 16-Dec-2015 | 12:50PM · Permalink
Hello justanotherkenny
I was just going by your Safe Web page. Hopefully, the Safe Web Team will be back to work. I can ask them to retest the site and see what's up.. I'm not a Symantec Employee and just try to help out.
I just got the scam insight warning also.
New
This Web site has been available for a short time.
No Users
No Norton Community members have used this site.
Few Users
Very few Norton Community members have used this site.
These are the reasons for the Scam Insight warning. The site is Safe, but it does seem to scare visitors away. At first there were no visitors, now very few visitors---Norton Users, so need more Norton visitors to the site.
I don't know if they can just remove that scam warning or not, but will ask that.
Thanks.
Posted: 16-Dec-2015 | 2:41PM · Permalink
Thanks Buddy, You're going outta your way to help me, and I truly appreciate that and am grateful to you. Yeah please if you can put in a word and have them re-test it, what ever needs to be done. I just donno who to contact now. You're like my Benefactor now...hence the SOS to you
Gracias Amigo
Posted: 17-Dec-2015 | 4:05AM · Permalink
Hi justanotherkenny,
We have whitelisted the url 'primarksales.com' for Scam insight and will no longer be detected as "Scam Insight: Personal Info Risk" .
And also, Thanks Floplot, for your help in communicating Chennai situation to customer, it was really helpful.
Cops
Posted: 17-Dec-2015 | 4:28AM · Permalink
Hi Abedonken,
Kindly request you to follow the site owner verification procedure as instructed in http://safeweb.norton.com/help/site_owners.
Once ownership has been verified, your site will be queued up for rating evaluation.
Cops
Posted: 17-Dec-2015 | 6:35AM · Permalink
Gracias Console_Ops ...
Muchos Gracias Appreciate you taking charge and fixing it for me ..You ROCK !!
Posted: 17-Dec-2015 | 9:21PM · Permalink
Hi Jakub 12,
Kindly request you to follow the site owner verification procedure as instructed in http://safeweb.norton.com/help/site_owners.
Once ownership has been verified, your site will be queued up for rating evaluation.
Cops
Posted: 22-Dec-2015 | 9:19PM · Permalink
Hi streambow,
Kindly request you to follow the site owner verification procedure as instructed in http://safeweb.norton.com/help/site_owners.
Once ownership has been verified, your site will be queued up for rating evaluation.
Cops
Posted: 10-Mar-2016 | 11:38PM · Edited: 11-Mar-2016 | 7:37AM · Permalink
[Admin Edit: This message has been moved to a thread of its own]
Posted: 26-Jul-2016 | 11:59AM · Edited: 26-Jul-2016 | 12:03PM · Permalink
One of my websites is getting blacklisted with this code for some reason, I have scanned it with both succuri and Quttera and it is clean. can you please confirm? the site is www . centurionsgroup . com
Posted: 26-Jul-2016 | 3:39PM · Permalink
Hello colin.worf
Please register with Safe Web. Then please post the html file in your next post. Once you tell me that you have registered and posted the needed file, then I can notify the Safe Web Team.
Please follow instructions on this site for Safe Web Site problems.
http://safeweb.norton.com/help/site_owners
Thanks.
Posted: 27-Jul-2016 | 2:51AM · Permalink
Hi colin.worf,
We have manually analyzed your site 'centurionsgroup.com' and found it to be clean so we have changed its rating to green.
https://safeweb.norton.com/report/show?url=centurionsgroup.com
Cops
Posted: 02-Aug-2016 | 1:36AM · Edited: 02-Aug-2016 | 1:58AM · Permalink
Hi Cops,
Can you analyzed my site also? my site 'www . bortolon . it/'.
Is my site really malicious or has it been wrongly classified?
Thank You
Posted: 02-Aug-2016 | 1:04PM · Permalink
Hello ggennari
Have you signed up for Safe Web? If you have, please place your html file in your next post? If you have not yet, please do register and when you get your html file, please put it in your next post
For a 2nd opinion, you can post your url in www.virustotal.com
Once you give me your html file, I can then submit this thread to Safe Web Team. They will verify and re-evaluate your website. They then will post back to this thread.
Thanks.
Posted: 03-Aug-2016 | 12:18AM · Permalink
Hello floplot,
i' ve already signed up for Safe Web and i put in the home this meta tag:
<meta name="norton-safeweb-site-verification" content="yjrvh-j-1en-ohxfj7ovbs2aco21540cka36oq-0r2pn4sdk6vps2-n-k7vm2zyto0rahgcktcri5jexfg8yg9nukxfzwzcnwmqdegmphtblarw7phw-20qjp-0vwj3e" />
Thanks
Posted: 03-Aug-2016 | 1:34PM · Permalink
Hello ggennari
I will notify the Safe Web Team that your site is ready to be verified and evaluated. Please stop by at this thread for a response from the Safe Web Team some time after midnight EDT on Wednesday.
Thanks.
Posted: 03-Aug-2016 | 7:52PM · Edited: 07-Aug-2016 | 8:22PM · Permalink
Hello,
We also get listed with "Malicious Domain Request 2" at https:// www. i-d-a .com
There are requests to a different domain on the page, but that is just Google Maps. Could you please check if it has been wrongly classified?
I highly appreciate your help.
Posted: 03-Aug-2016 | 9:50PM · Permalink
Hello
Will check this one out on Thurs. afternoon.
Thanks.
Posted: 03-Aug-2016 | 11:46PM · Permalink
Hi ggennari
We have manually analyzed your site 'bortolon.it' and found it to be clean so we have changed its rating to green.
https://safeweb.norton.com/report/show?url=bortolon.it
Cops
Posted: 03-Aug-2016 | 11:47PM · Permalink
Hi portislander
Kindly request you to follow the site owner verification procedure as instructed in http://safeweb.norton.com/help/site_owners.
Once ownership has been verified, your site will be queued up for rating evaluation.
Cops
There are currently 6 users online.
This thread is closed from further comment. Please visit the forum to start a new thread.