We have customers who are unable to access our website due to our domain being flagged as Malvertising. Here are details provided by a customer:
Threat name: URL:Malvertising
Threat type: Malvertising - This threat is a type of malware that is spread through online advertising.
Status: Aborted
Detected by: Safe Web
This is a false positive. kpidepot [dot] com is a legitimate B2B subscription database for business Key Performance Indicators (KPIs) and benchmarks. Notably, Norton Safe Web’s own website currently rates kpidepot [dot] com as safe, yet customers running Norton desktop products are still receiving the Malvertising block. This suggests a discrepancy between the Safe Web portal rating and the local detection signatures being pushed to Norton clients.
The false positive is likely triggered by standard business KPI terminology on our site related to cybersecurity performance metrics (e.g., “fraud detection rate,” “phishing response time,” “malware detection rate”). These are legitimate business measurements, not security threats.
Our domain is clean across all major security databases:
Google Safe Browsing: Clean
VirusTotal: 0/94 detections
Sucuri SiteCheck: No malware, not blacklisted
ScamAdviser: Verified, trust score 80
McAfee, ESET, PhishTank, Kaspersky, BitDefender: All clean
We request that the Malvertising classification be removed from Norton’s detection signatures to match the Safe Web portal’s own “safe” rating. This false positive is actively impacting our business and preventing customers from accessing our site.
Note: after submitting dispute and waiting 48 business hours with no change.
Please contact official Norton support and advise support that you’ve submitted dispute and waited 48 business hours. My understanding is…once you state that you have already submitted False Positive over the submission portal and waited 48 business hours…support agent shall take the URL and detection screenshot and advance the case.
==============================
Use the Formal Submission Portal: If the Safe Web form isn’t giving you updates, try the dedicated Norton Submission Portal. This system is used for tracking false positive reports and may provide better feedback. Verify Site Ownership: Ensure you have officially “claimed” your website within the Safe Web portal. Verified owners generally have access to a dashboard where they can see the status of their site and any pending disputes without relying solely on email notifications. 48 hours: Community suggests waiting 48 business hours . If the status of your site has not changed on the Safe Web public lookup after this time, it likely means the dispute is still in the queue or was not processed. Escalate to Norton Support: If you haven’t received an email or a status change after 48 hours, contact Norton Support directly. Explicitly tell the agent: “I have already submitted a site dispute via the Safe Web portal more than 48 hours ago and have received no email notification or status update.” This often prompts them to escalate the ticket manually.
We resolved the domain kpidepot.com to IP address 172.67.173.208
172.67.173.208 was found in our database!
IP Abuse Reports for 172.67.173.208
This IP address has been reported a total of 1 time from 1 distinct source. It was most recently reported 2 years ago. Old Reports: The most recent abuse report for this IP address is from 2 years ago. It is possible that this IP is no longer involved in abusive activities.
