I’m reaching out to report what appears to be a false positive where Norton is blocking my website:
Website: ikann.in
Issue
Norton flags my domain as unsafe (phishing/suspicious), but after extensive testing and validation, I have not found any malicious content or behavior on the site.
What I’ve Verified
The site is hosted securely with HTTPS (valid SSL certificate).
No malware detected via external scanners (e.g., VirusTotal, Hybrid Analysis).
No suspicious scripts, redirects, or downloads.
The site is a SaaS platform that helps users build websites and virtual assistants.
Other antivirus tools and browsers do not flag the site.
Observation
Norton appears to be flagging my domain, while similar or identical content hosted on other domains is not blocked.
One potential cause could be how missing resources (e.g., /favicon.ico) are handled by my hosting (AWS S3 returns an XML error instead of a proper 404 or icon file).
This may be incorrectly interpreted as suspicious behavior.
Request
Could someone from the Norton team please:
Review and re-evaluate my domain ikann.in
Confirm the exact reason for the block
Advise on any specific remediation steps required
I’m happy to provide additional details or logs if needed.
Note: after submitting dispute and waiting 48 business hours with no change.
Please contact official Norton support and advise support that you’ve submitted dispute and waited 48 business hours. My understanding is…once you state that you have already submitted False Positive over the submission portal and waited 48 business hours…support agent shall take the URL and detection screenshot and advance the case.
==============================
Use the Formal Submission Portal: If the Safe Web form isn’t giving you updates, try the dedicated Norton Submission Portal. This system is used for tracking false positive reports and may provide better feedback. Verify Site Ownership: Ensure you have officially “claimed” your website within the Safe Web portal. Verified owners generally have access to a dashboard where they can see the status of their site and any pending disputes without relying solely on email notifications. 48 hours: Community suggests waiting 48 business hours . If the status of your site has not changed on the Safe Web public lookup after this time, it likely means the dispute is still in the queue or was not processed. Escalate to Norton Support: If you haven’t received an email or a status change after 48 hours, contact Norton Support directly. Explicitly tell the agent: “I have already submitted a site dispute via the Safe Web portal more than 48 hours ago and have received no email notification or status update.” This often prompts them to escalate the ticket manually.
Note: after submitting dispute and waiting 48 business hours with no change.
Please contact official Norton support and advise support that you’ve submitted dispute and waited 48 business hours. My understanding is…once you state that you have already submitted False Positive over the submission portal and waited 48 business hours…support agent shall take the URL and detection screenshot and advance the case.
==============================
Use the Formal Submission Portal: If the Safe Web form isn’t giving you updates, try the dedicated Norton Submission Portal. This system is used for tracking false positive reports and may provide better feedback. Verify Site Ownership: Ensure you have officially “claimed” your website within the Safe Web portal. Verified owners generally have access to a dashboard where they can see the status of their site and any pending disputes without relying solely on email notifications. 48 hours: Community suggests waiting 48 business hours . If the status of your site has not changed on the Safe Web public lookup after this time, it likely means the dispute is still in the queue or was not processed. Escalate to Norton Support: If you haven’t received an email or a status change after 48 hours, contact Norton Support directly. Explicitly tell the agent: “I have already submitted a site dispute via the Safe Web portal more than 48 hours ago and have received no email notification or status update.” This often prompts them to escalate the ticket manually.
@bjm thank you for the support. I have submitted again. I have also raised a dispute after claiming site ownership but no luck so far. I’ll wait as suggested.
The Norton Safe Web portal reports on the reputation of the entire URL…including its specific parameters, but it uses the base domain’s history to inform that rating.
This discrepancy occurs because the Norton Safe Web portal and the Norton Safe Web browser extension often operate on different data synchronization cycles and threat detection layers. While the portal reflects the current “cloud” status of a URL, the extension may be using local heuristics or an older cached database entry.
Caching & Sync Latency: The browser extension may store a local cache of site ratings to speed up browsing. Even if you have successfully disputed a rating and see it updated on safeweb.norton.com, the extension might not pull the new “Safe” status for 24–48 hours or until its next internal update.
Asset-Level Blocking: The portal typically rates a root domain (e.g., example.com), while the extension scans every individual asset (scripts, ads, or CDN links) loaded on a page. If a single third-party ad or script is flagged as malicious, the extension will trigger a “Dangerous Web Page Blocked” warning even if the main site is officially rated “Safe”.
Real-Time Heuristics: The extension includes “Scam Protection” and “Web Shield” features that perform real-time, behavior-based analysis. It may block a page based on suspicious on-page elements (like a malformed SSL certificate or a specific scam pattern) that the static portal crawler hasn’t encountered yet.
===============================
Note: on my side:
Norton 360 Safe Web engine nor Norton Private Browser Web Shield engine…detect…https://ikann.in/…at this time.
That makes sense. When I used custom .com domain for the same site Norton safe site flagged it safe. Here I thought Norton has some built in discrimination against Indian TLD. In any case, I wouldn’t be surprised given so many scam centres from India . I have bought another domain and waiting to confirm that site behaviour is not the reason for blocking. Hope to get clarity on that soon. Not sure if @bjm you are from the Norton team or a member helping others, which I really appreciate.
It looks like the site is currently inaccessible; therefore, the check can’t be performed. Please let me know once the site is back up so it can be reviewed.
. I have bought another domain and waiting to confirm that site behaviour is not the reason for blocking. Hope to get clarity on that soon. Not sure if 
