Fake e-Store Blocks

Melody_Spier · September 30, 2025, 3:37pm

Our websites / pages keep getting flagged as fake e-stores (thus blocked) even though they are legitimate. Using Norton’s online website check says the websites are safe. This started about 3-4 weeks ago. I submitted a dispute for the first website and it says it was corrected, but it continues to be a problem.

So, then we moved the sales pages to a different website using the same builder software and it too was blocked. Thinking maybe it had something to do with the builder software, we once again moved the sales pages to a 3rd website using html rather than a page builder. This 3rd site has been online for many years and has never had issues, but it was immediately flagged as a fake e-store.

I cannot get feedback on what could be causing this - there’s no flashy junk or anything outside the normal stuff we use for our sales pages that have never had issues before.

bjm · September 30, 2025, 8:00pm

Please review: How-To Contact Norton Support
Norton support United States 1-800-745-6061 or 1-800-745-6034

===========================================

We’ll try to call attention. No promises. No timeline.

@Gayathri_R , @MJay …can you help?

==========================================

Care to share domain name/address?

space domain name/address to break link
Preformatted text </> to break link

======================================

fwiw ~ I’ve seen Safe Web rating and new Safe Web/Web Shield rating mis-match.
for example: here

Melody_Spier · September 30, 2025, 11:20pm

ekituni (this is the 2nd site we used & it’s new)
ekithub (3rd site - has been up for years without issue)
…both are dot com

bjm · September 30, 2025, 11:28pm

https://ekituni.com/

cdf784a64cb0/2025-09-30T23:25:45.530Z

________________________________________________________

https://ekithub.com

955d7b3ab398/2025-09-30T23:29:14.858Z

_______________________________________________________

We resolved the domain ekituni.com to IP address 34.202.63.170
IP Abuse Reports for 34.202.63.170:

This IP address has been reported a total of 2 times from 2 distinct sources. 34.202.63.170 was first reported on October 5th 2023, and the most recent report was 9 months ago.

Old Reports: The most recent abuse report for this IP address is from 9 months ago. It is possible that this IP is no longer involved in abusive activities.

https://www.abuseipdb.com/check/34.202.63.170

_________________________________________________________

We resolved the domain ekithub.com to IP address 172.67.71.81
172.67.71.81 was not found in our database

https://www.abuseipdb.com/check/172.67.71.81

______________________________________________________

Submit a file or URL to Norton for review here

___________________________________________________

Norton Private Browser - Web Shield - Standard shields
https://ekituni.com/

https://ekithub.com/

______________________________________________________

Norton Private Browser - Web Shield - Advanced shields

https://ekituni.com/

https://ekithub.com/

_________________________________________________________

@Gayathri_R , @MJay … can you help?

bjm · October 2, 2025, 9:08pm

https://ekituni.com/

---------------------------------

Norton Private Browser - Web Shield - Standard shields
https://ekituni.com/

Norton Private Browser - Web Shield - Advanced shields
https://ekituni.com/

-----------------------------------

@Gayathri_R , @MJay

bjm · October 2, 2025, 9:18pm

https://ekithub.com

----------------------------

Norton Private Browser - Web Shield - Standard shields
https://ekithub.com/

Norton Private Browser - Web Shield - Advanced shields
https://ekithub.com/

------------------------------

@Gayathri_R , @MJay

MJay · October 3, 2025, 2:52pm

Hello,

Thank you for raising this and reporting a suspected false positive detection.

Our specialists reviewed the detection and confirmed it as correct. Unfortunately, I am not able to provide any further information on this matter.

As you are the reported website owner and want us to remove the detection, please make the necessary steps to review your website and source code, and contact us again for the new analysis and detection review.

I’m sorry for the confusing mismatch in the databases. We’re checking why ‘Safe’ is stated in one of them.

Thank you!

bjm · October 3, 2025, 3:01pm

Hello @MJay

Norton Private Browser - Web Shield - Standard shields
https://ekithub.com/

-------------------------------------------

https://ekithub.com/

====================================================

Norton Private Browser - Web Shield - Standard shields
https://ekituni.com/

Norton Private Browser - Web Shield - Advanced shields
https://ekituni.com/

MJay · October 3, 2025, 3:07pm

Thank you @bjm for highlighting Browser as well! I’m checking it too.

Melody_Spier · October 3, 2025, 5:08pm

Thank you for checking. We’ve had our host company scan the site multiple times since this started and they say they find nothing wrong. I just asked them to check it again. I can post their reply once they complete it.

Are there other steps I can personally take to check for issues if the host is finding none?

bjm · October 3, 2025, 6:23pm

Hello @MJay

https://www.ekithubuniversity.com/

---------------------------------------
https://shopekits.com/

--------------------------------------
https://ekithub.com/1-dollar-platinum-innercircle/

--------------------------------------
https://noomu.com/

---------------------------------------
https://shopekits.com/collections/content-creator-swag

---------------------------------------
https://shopekits.com/collections/plr-dollar-shop

--------------------------------------------
https://www.ekithubuniversity.com/offers/MzKPHUQ3/checkout

=============================================

Norton Private Browser - Web Shield - Advanced shields
https://noomu.com/

https://www.ekithubuniversity.com/

https://shopekits.com/

Melody_Spier · October 3, 2025, 6:33pm

Thank you!

bjm · October 10, 2025, 7:26pm

Hello @MJay
https://ekithub.com

1d2681ea4d49/2025-10-10T19:17:24.984Z

-----------------------------------------------

Web Shield - Standard shields
https://ekithub.com

Web Shield - Advanced shields

bjm · October 10, 2025, 7:38pm

Hello @MJay
https://ekituni.com/

936b6a8bcbda/2025-10-10T19:37:19.615Z

----------------------------------------------

Web Shield - Standard shields
https://ekituni.com/

Web Shield - Advanced shields

MJay · October 13, 2025, 6:00am

Hello @bjm,
We found the Browser’s culprit and will fix it in version 141. Thank you for highlighting this, and I’m again sorry for the confusion.

I’m also sorry for the different display on Safeweb and in the detection dialog. I’m still checking that, and will let you know when I have an outcome.

Thank you!