• All Community
    • All Community
    • Forums
    • Ideas
    • Blogs
Advanced

Not what you are looking for? Ask the experts!

This forum thread needs a solution.
Kudos0

More areas where Norton should conduct further research.

What follows is a continuance of my “Increasing Intel” series:      

Concluding, this was a pretty ambitious project, pouring over previous research and then comparing it to current research.  With all of these gray question marks that i have brought to the fore, i believe this is at least a good “launch pad” for Norton to possibly venture into territory it has not traversed before AND augment their definitions.    

Regards,

H.B. 

Replies

Kudos0

Re: More areas where Norton should conduct further research.

If you are asking about the grey question marks in the search results, as you know that just indicates that the site has not been registered or tested by Safe Web. I'm sure you are also aware that the only time a site gets tested is if the site owner registers the site. Norton does not troll the web to check and rate sites.

Is there something else you are suggesting/asking that I am missing?

Things happen. Export/Backup your Norton Password Manager data.
Kudos0

Re: More areas where Norton should conduct further research.

Hello H B

That's some list  !  !.  I don't know if all of these sites have already been checked by Safe Web and are now incorrect,, I think that is what peterweb is referring to. Since it's such a long list, I have no clue how long it will take them to check all of these sites or the ones that appear to be wrong.

Usually, the site owner has to request a re-evaluation of a site before it is re-evaluated after it has been verified. Sometimes, a site will be re-evaluated if a customer wants to visit a site, but wants to have it checked out first, then they might do it. Most re-evaluations occur when a site is blocked and it shouldn't be blocked. I think this list has to be shortened, perhaps by submitting a much shorter list first and see what happens with that. I don't think submitting such a long list like this would result in anything successfully Try a short list first.and see what happens. I'm sorry.

Have a Good Night and

Thanks.

Success always occurs in private and failure in full view. Windows 10 Pro 64 bit Norton Core Security Plus 22.17.3.50 Core Firmware 282 I E 11 Chrome latest version.
Kudos0

Re: More areas where Norton should conduct further research.

Peter explains,

Norton does not troll the web to check and rate sites.”

Hi Peter,

I could be wrong, but, i would imagine that Symantec does have an intelligence taskforce that can follow-up on leads when presented.  If not, perhaps that is something they might want to consider moving forward. 

Flo explains,

“I don't think submitting such a long list like this would result in anything successful.  Try a short list first and see what happens.”

Hi Flo,

At this point, i’m not feeling overwhelmingly inspired to somehow re-post this.  I presented what i needed to in the hopes that Symantec would take the next step(s) and perform further investigation in the interest of advancing their intel.  If not, that’s on them, i feel as though i have more than done my reasonable part, and, in fact, did report many of them already, especially the ones that Google indicated would harm my computer. 

Regards,

H.B.     

Kudos0

Re: More areas where Norton should conduct further research.

Hi Peter,

I could be wrong, but, i would imagine that Symantec does have an intelligence taskforce that can follow-up on leads when presented.  If not, perhaps that is something they might want to consider moving forward. 

This taskforce you refer to is the Safe Web team that floplot communicates with. But as you also note, a site has to be reported to them. There is no automatic trolling of the internet to find sites that have not been registered with Norton. I'm sure that if others were interested in checking as you did, they would find millions of web sites that have not been tested. 

Things happen. Export/Backup your Norton Password Manager data.
Kudos1 Stats

Re: More areas where Norton should conduct further research.

Thank you for the feedback-- we're always looking for ways to improve regardless.

I'll share this thread with the team that manages the definitions.

RDLeo

Program Manager Browser Protection

Kudos0

Re: More areas where Norton should conduct further research.

Hi Hammer_Bro

The following sites have been submitted for analysis and are currently rated green in safeweb.norton.com.

https://safeweb.norton.com/report/show?url=limburghiergroeienideeen.be

https://safeweb.norton.com/report/show?url=visithasselt.be
https://safeweb.norton.com/report/show?url=festivalretour.be
https://safeweb.norton.com/report/show?url=onedu.tumblr.com
https://safeweb.norton.com/report/show?url=cleanbits.org
https://safeweb.norton.com/report/show?url=samesites.org
https://safeweb.norton.com/report/show?url=acnow.net
https://safeweb.norton.com/report/show?url=keyword-suggest-tool.com
https://safeweb.norton.com/report/show?url=feeztje.nl
https://safeweb.norton.com/report/show?url=tuugo.me
https://safeweb.norton.com/report/show?url=keen.wtf
https://safeweb.norton.com/report/show?url=pageadviser.net
https://safeweb.norton.com/report/show?url=followsite.net
https://safeweb.norton.com/report/show?url=websiteprofile.net
https://safeweb.norton.com/report/show?url=dosn.com.tw
https://safeweb.norton.com/report/show?url=cses.tc.edu.tw
https://safeweb.norton.com/report/show?url=sitetech.tips
https://safeweb.norton.com/report/show?url=w3stats.com

https://safeweb.norton.com/report/show?url=scitechvista.nat.gov.tw
https://safeweb.norton.com/report/show?url=documentsky.com
https://safeweb.norton.com/report/show?url=pagevisr.com

https://safeweb.norton.com/report/show?url=checkwebsite.pro
https://safeweb.norton.com/report/show?url=yasteq.com
https://safeweb.norton.com/report/show?url=thiszoone.com
https://safeweb.norton.com/report/show?url=olegodao.com
https://safeweb.norton.com/report/show?url=schoolandcollegelistings.com
https://safeweb.norton.com/report/show?url=zlsunso.com.tw
https://safeweb.norton.com/report/show?url=coccad.com
https://safeweb.norton.com/report/show?url=showanywish.com
https://safeweb.norton.com/report/show?url=aotemo.com
https://safeweb.norton.com/report/show?url=gd7j.com
https://safeweb.norton.com/report/show?url=372109999.com
https://safeweb.norton.com/report/show?url=devpeen.com
https://safeweb.norton.com/report/show?url=vvtt.org
https://safeweb.norton.com/report/show?url=zy-8.com
https://safeweb.norton.com/report/show?url=pinpicl.com
https://safeweb.norton.com/report/show?url=5671.info
https://safeweb.norton.com/report/show?url=zuowen1.info
https://safeweb.norton.com/report/show?url=ofdays.com
https://safeweb.norton.com/report/show?url=spymetrics.ru
https://safeweb.norton.com/report/show?url=testmedplus.com
https://safeweb.norton.com/report/show?url=vidinfo.org
https://safeweb.norton.com/report/show?url=vdocuments.site
https://safeweb.norton.com/report/show?url=portaltrabajos.pe
https://safeweb.norton.com/report/show?url=gob.pe
https://safeweb.norton.com/report/show?url=dremayacucho.gob.pe
https://safeweb.norton.com/report/show?url=portraltrabajos.pe
https://safeweb.norton.com/report/show?url=perucompras.gob.pe
https://safeweb.norton.com/report/show?url=sbpcusco.gob.pe
https://safeweb.norton.com/report/show?url=sbptrujillo.gob.pe
https://safeweb.norton.com/report/show?url=pina.gob.pe
https://safeweb.norton.com/report/show?url=pedamaalc.gob.pe
https://safeweb.norton.com/report/show?url=cusco.gob.pe
https://safeweb.norton.com/report/show?url=pronied.gob.pe
https://safeweb.norton.com/report/show?url=gobiernodigital.gob.pe
https://safeweb.norton.com/report/show?url=facturanegociable.gob.pe
https://safeweb.norton.com/report/show?url=enlinea.sunedu.gob.pe
https://safeweb.norton.com/report/show?url=munitocache.gob.pe
https://safeweb.norton.com/report/show?url=fluturi.me
https://safeweb.norton.com/report/show?url=innovateperu.gob.pe
https://safeweb.norton.com/report/show?url=direjesanpnp.gob.pe
https://safeweb.norton.com/report/show?url=procalidad.gob.pe
https://safeweb.norton.com/report/show?url=acomerpescado.gob.pe
https://safeweb.norton.com/report/show?url=datosabiertos.gob.pe
https://safeweb.norton.com/report/show?url=inacal.gob.pe
https://safeweb.norton.com/report/show?url=palmebi.com
https://safeweb.norton.com/report/show?url=pinpdf.com
https://safeweb.norton.com/report/show?url=allinteres.blogspot.com
https://safeweb.norton.com/report/show?url=wescellricons.tk
https://safeweb.norton.com/report/show?url=arxivi.org
https://safeweb.norton.com/report/show?url=tepitreve.tk
https://safeweb.norton.com/report/show?url=adjara.com
https://safeweb.norton.com/report/show?url=siyva.ucoz.com
https://safeweb.norton.com/report/show?url=ygsearch.com
https://safeweb.norton.com/report/show?url=girenunaqivacet.ml
https://safeweb.norton.com/report/show?url=ekeqipibaba.tk
https://safeweb.norton.com/report/show?url=iludenavuwi.tk
https://safeweb.norton.com/report/show?url=xvamli.ucoz.com
https://safeweb.norton.com/report/show?url=allforgta.ucoz.com
https://safeweb.norton.com/report/show?url=shopsoos.com
https://safeweb.norton.com/report/show?url=softonic.com
https://safeweb.norton.com/report/show?url=prizi.ge
https://safeweb.norton.com/report/show?url=zonwhois.net
https://safeweb.norton.com/report/show?url=tvertractor.ru

Cops

Kudos0

Re: More areas where Norton should conduct further research.

Hello Hammer_Bro

Good Luck with all those sites. The reviews should be cleaned up now.

Please pick out the post which solved the issue for you. Then mark that post as the Solution by clicking on Mark As Solution located on the bottom of the post.

Have a Good Night and

Thanks.

Success always occurs in private and failure in full view. Windows 10 Pro 64 bit Norton Core Security Plus 22.17.3.50 Core Firmware 282 I E 11 Chrome latest version.
Kudos0

Re: More areas where Norton should conduct further research.

Hello Leo, COPS and Flo,

COPS, would you happen to know how thoroughly these were gone through?  From my information pertaining to Safe Web, i was informed that Safe Web will ONLY scan a prospective site's Homepage for threats, that is it.  Would you happen to know if they systematically went through these even checking links throughout the sites?  I ask because, for a number of these, the community intel as well as security info from other bureaus was NOT good whatsoever, so, forgive me if i'm just a bit cautious in validating a result here. 

COPS explains,

"The following sites have been submitted for analysis and are currently rated green in safeweb.norton.com."

I understand that these are currently rated green in Safe Web, however, you mention that they have been submitted for analysis - - could it be the case that upon that final review some of these could be turned red? 

Some sticking points:-

vvtt.org, although Norton Safe Web is indicating that it is safe, it is indicating that the site stems from Canada.  URLVoid however, indicates that the site stems from Singapore.  Could Safe Web not be recognising the correct site in the scan?  I would lend more weight to the site stemming from Singapore insofar as the search result description was in Chinese.   I still do not like the fact that even Google indicates, "May harm your computer".  I mean, i don't necessarily take Google as being that much into the "Security Biz", yet, they are even indicating unsafe. 

peekyou.com, although indicated as "Safe" by Safe Web, three users from the community report virus attacks. 

In the case of acnow.net, once again, indicated "Safe" by Safe Web, however, Norton Community User indicates that this site was blocked by Microsoft Smart Screen Filter with the following warning: "Malicious software threat: This site contains links to viruses or other software programs that can reveal personal information stored or typed on your computer to malicious persons."  

onedu.tumblr.com had such a questionable description - - are we sure that that is safe?

Was cheapviagraonlineusa.com OR viagraonlinews.com ever checked?  As i'm pretty sure those are illegal pharma scam sites. 

There were a number of IPs that i mentioned in the original post that i did not see in your list COPS, including:

91.208.144.132 (IP blacklisted by Barracuda)
199.59.242.150 (Blacklisted by hpHosts)
208.91.196.11 (Blacklisted by hpHosts)

How about the VERY suspicious search result with the title: Kartuli.porno.saiti, that seemed to be a Google address connecting directly to porn?  That didn't seem right.

Ucoz.com (Can go to different extensions, how thoroughly did they go into those?) A reviewer
on Safe Web indicated that ucoz was saturated with malware. Also, when you click the link you provide for siyva.ucoz.com just defaults to the standard ucoz over on Safe Web.  This is another historical contention that i have with Safe Web.  Many different websites can have extra extensions which Norton Safe Web does NOT always pick up on.  I've noticed this especially with tumblr and blogspot. 

Softonic.com (How thoroughly did they go through that as over 100 reviews on Safe Web and people did not speak highly of it to say the least, rated an abysmal 2.1! 

testmedplus.com looks to be a pharma scam site its IP: 46.17.46.46 HAS been found in the hpHosts database with ADDITIONAL matches:
liftstroiservice.ru -- cited for phishing,
webearnings.ru -- cited for WRZ
punk-forum.net -- cited for EMD
Ref:- https://hosts-file.net/?s=46.17.46.46&view=matches 

How thorough were they with checking into dosn?  That seemed very suspicious.

How about vampireanime.555forum.nl?  Once again, very suspicious from the research
,and, Norton Safe Web does NOT delineate the specific extension i'm referencing.  It defaults to: 555forum.nl. 

Lastly, how confident are we really that: spymetrics.ru is actually safe?  To be honest, that sounds like a domain that would facilitate spying on US elections (big laugh)  Perhaps, that should be looked into more deeply.

Concluding:-  I don't mean to be a pain about this, however, i just want to make sure these domains were comprehensively looked into and not just "glossed over" as some of these seem really bad.  If i can have that assurance, i have no problem marking the thread as solved.  Another contention i've had since reviewing on Safe Web since 2009 is that Safe Web typically comes back with that good ol' green check of approval, yet, not only community reviews are reflecting negatively (people getting stung with viruses), but, my Norton program has had to even go into action on sites that were supposedly deemed "safe" by Safe Web - - so, you can understand my cautiousness here.  I really believe that Safe Web has to become more comprehensive when it evaluates sites in order to be considered a relevant resource in the fight against malware.  Some ways that Safe Web can do this is by recognizing additional extensions in Websites (like i alluded to earlier) i.e., not just blogspot.com, rather, pick up on extended names: madeupname.blogspot.com.  Additionally, perhaps Norton Safe Web can withhold that wholesale "green check of approval" IF community reviews (legitimate of course, not bot accounts) are indicating quite to the contrary.  Also, if Safe Web could scan a site more deeply, seeking out embedded links in the pages that could possibly lead to malware domains.  I believe the aforementioned to be at least some of the ways we can make Norton Safe Web more advanced.   

Sincerely,

H.B.        

Kudos1 Stats

Re: More areas where Norton should conduct further research.

Hello H B

I asked Cops to read over your comments. The Safe Web Team won't be around until Sunday night after midnight EDT.They will need some time to go over your whole post, so I can't give you a definite date when they  will respond to you.

Have a Nice Day and

Thanks.

Success always occurs in private and failure in full view. Windows 10 Pro 64 bit Norton Core Security Plus 22.17.3.50 Core Firmware 282 I E 11 Chrome latest version.
Kudos0

Re: More areas where Norton should conduct further research.

Hello once again Flo,

Sounds good!  :-)

Sincerely,

H.B. 

Kudos0

Re: More areas where Norton should conduct further research.

Hi Flo,

Was there ever a "final word" from COPS? 

Sincerely,

H.B. 

Kudos1 Stats

Re: More areas where Norton should conduct further research.

Hello H B

I haven't heard from Cops in reference to these. Usually, to have a site evaluated, it needs to be requested by the site owner. First the sites have to be verified and then evaluated. If someone complains about a False Positive, then it is looked into. You have a heck of a lot websites here. It's going to take them some time to digest what you have posted. I do know though if a site is marked as untested, it does need to verified first before it can be evaluated. I'm sure it's going to take more than a week to go over all of your sites. I'll mention it again to Cops.

Have a Good Night and

Thanks.

Success always occurs in private and failure in full view. Windows 10 Pro 64 bit Norton Core Security Plus 22.17.3.50 Core Firmware 282 I E 11 Chrome latest version.
Kudos0

Re: More areas where Norton should conduct further research.

Thanks!  ;-) 

Kudos1 Stats

Re: More areas where Norton should conduct further research.

Hello H B


COPS explains,

"The following sites have been submitted for analysis and are currently rated green in safeweb.norton.com


English is their 2nd languish.  That means the sites have been analyzed and the result of that analysis is rated Green OK. That rating is at the time of the rating which is the same day as the posting. I know the answer to that much of your post. It is always possible that a site can become compromised at any time. I haven't heard that they only scan the Home Page of the sites. I suppose it would depend on the site. If they had to scan FB, that would be an endless scan. I would say that it depends on the type of site it is. This isn't  anything official. Some websites are constantly changing. They don't keep on checking the same websites.

I will mention this again to them. The Safe Web Team doesn't go around reading the threads usually. I check out the threads now and then let them know which threads need their attention. You do bring up a lot in your post. It's more than just verifying and analyzing a website that you are asking..

Have a Nice Day and

Thanks.

Success always occurs in private and failure in full view. Windows 10 Pro 64 bit Norton Core Security Plus 22.17.3.50 Core Firmware 282 I E 11 Chrome latest version.
Kudos0

Re: More areas where Norton should conduct further research.

It is explained,

"English is their 2nd language."

Interesting.

Kudos0

Re: More areas where Norton should conduct further research.

Hello H B

Yes, I made a little typo. language.

Have a Good Night and

Thanks.

Success always occurs in private and failure in full view. Windows 10 Pro 64 bit Norton Core Security Plus 22.17.3.50 Core Firmware 282 I E 11 Chrome latest version.

This thread is closed from further comment. Please visit the forum to start a new thread.