False positive, verified owner, automatic rating with no reason given

Hello,

I am the verified owner of onatea[.]com, currently rated Risky by Norton Safe Web. I am looking for a way to obtain a manual review, as the automatic process is not producing a usable outcome.

Summary:

  • I acquired the domain second-hand in March 2026. The domain was used maliciously under a previous owner before 2020; those paths have returned HTTP 404 for years.
  • I submitted a dispute through the public form several days ago, with no response.
  • I then created an account, verified domain ownership via meta tag, and submitted a second request. No response either.
  • I received a notification stating the rating changed from Safe to Risky after a re-evaluation, although the site was already showing as Risky the day before.
  • The report indicates an automatic classification and gives no reason or affected URL, so there is nothing I can act on.

Meanwhile the case has been reviewed and cleared elsewhere:

  • Cisco Talos completed a manual review and raised the domain’s web reputation to Neutral.
  • The Phishing.Database project verified ownership and whitelisted the domain.
  • McAfee reclassified the domain from Malicious Sites to Travel, with a Minimal Risk web reputation.
  • Kaspersky, SOCRadar, alphaMountain, Gridinsoft and ESET each removed their detections. Bitdefender, FortiGuard, Symantec corrected their categorisation.
  • The domain currently shows 0/90 detections on VirusTotal, and Google Safe Browsing reports no issues.

The domain hosts a B2B SaaS booking platform operated by a company registered in France. It impersonates no third-party brand and collects no credentials other than those of accounts created on our own platform.

Could someone point me to a channel for a manual review, or indicate the reason behind the current rating?

Thanks,

1 Like

Hello @enzol
Welcome to the Norton Community!

Understanding Norton Site Re-Evaluations

We’ll try to call attention:
https://onatea.com/

Threat name: URL:Phishing
URL: onatea.com
Detected by: Web Shield | URL scanning
Alert ID: 6c7421715d14


31391ce92f20/2026-09-18T20:45:15.480Z
40ba831b6c22/2026-09-18T20:57:15.999Z

https://onatea.com/

Threat name: URL:Phishing
URL: onatea.com
Detected by: Web Shield | URL scanning
Alert ID: 4231c1536f67

1faa1b359ffc/2026-09-20T17:06:23.202Z

Hi @enzol

Thank You for reporting the issue on Norton Community. The reported url is now resolved as False Positive. Could you please check now?

Thanks !

1 Like

https://onatea.com/


Thank you, I can confirm the site now shows correctly on my side. Much appreciated for the quick resolution.

1 Like