Identifying the sources of danger

Welcome fellow Alpha-testers … uh, I mean, paid users! I’ve been using Norton Antivirus and subsequent iterations since 1998 when McAfee destroyed my hard drive (to the point where professional data recovery services could not extract more than a fraction of what was lost.) While it has always had its problems it has always kept me and my business safe from malicious attacks. But I bet this new version loses them a lot of business. I know I’m about to start looking around.
I’ll try to keep this post to just the one issue which prompted me to hunt up this forum again for the first time in years.

Issue abstract: Norton warns me of web accesses to specific and very malicious sounding websites from my browser, but gives me no hint as to which website or tab tried to make that access.

Detailed description: Example, right now there is a popup on my screen that says " We prevented your connection to globalupload.io because it is a dangerous webpage. Threat category: URL:Blacklist" Wouldn’t it be nice if I knew which of the half-a-zillion browser tabs that I have open was making that call? But I can see no way to do it. So I have to see this message every #*$() time I open my browser.
To make matters even more confusing, it appears that this blacklisted URL is an access to a whitelist. And a very brief look on Google suggests that it might even be legitimate. So I’d really like to know which site is calling it so I can judge for myself. I would appreciate the warning from Norton a lot more if it would provide me with the information I need to do that.

Product & version number: 24.12.9725 (build 24.12.9725.902)

OS details: Windows 10. Yes, it’s still valid. And yes, I’ll upgrade it before October.

If you have any supporting screenshots, please add them:

fwiw ~

fwiw ~ on my side
http://globalupload.io lands on https://guardiandatasystems.com/

Did you clear browser cookies n cache?
Do you run browser sync?
Did you recently install any program / browser extension?
Did you recently allow push notifications?
Did you recently change site permissions?
Did you run Norton Full Scan?
Did you run Malwarebytes Scan?

================================

https://globalupload.io/ipns/QmYoQ4Gn9vAcimaXT5xWYAPrBCu3QZyLmEvhLFu9djNZCy/whitelist.min.txt


876113f3f2c6/2025-01-09T17:39:28.744Z

Learn more about Safe Web [here]

===================================

fwiw ~ as test: Safe Web disabled
https://globalupload.io

https://globalupload.io/ipns/QmYoQ4Gn9vAcimaXT5xWYAPrBCu3QZyLmEvhLFu9djNZCy/whitelist.min.txt

I’m not actually asking about that particular domain. I’m asking how do I know which website or browser tab called that domain. I cannot find that Norton supplies this info and without it the warning is useless.

Hello @FatBear

I hear ya’…and you’ve submitted false positive report here…and if you do not agree with Norton…try adding Norton 360 Safe Web exclusion…if you do not agree with Norton.

Um, if you’re seeing “this message” here every time you open your browser…the warning may not be useless.
Learn more about Safe Web [here]

Did you clear browser cookies n cache?
Do you run browser sync?
Did you recently install any program / browser extension?
Did you recently allow push notifications?
Did you recently change site permissions?
Did you run Norton Full Scan?
Did you run Malwarebytes Scan?

=============================

Do you know if you had globalupload.io or guardiandatasystems.com tabs open?

Malware attacks: What you need to know here
What are drive-by downloads here
What Are Malicious Websites and Drive by Downloads here
Malware Blog here

No, I don’t think you hear me. I did not file a false positive report. I asked a question which remains unanswered. Perhaps it is unanswerable. The question is how do I know which website or browser tab is trying to access that globalupload.io domain? Once I know that I can decide what action to take. I am not interested in allowing Norton to completely control everything, nor am I interested in becoming a security guru. I just want the information to react to this, and a raft of other similar warnings that have been popping up since the recent upgrade. (Yes, I’m aware that a setting was probably changed during the upgrade and Norton may have been protecting me from these things all along, but had I known I would still have asked the same question.) Why do I wish to know this rather than “just” trust Norton to protect me? Because I want to know if I am visiting a dangerous website so I can avoid it in the future. I don’t visit porn sites or heavily slanted political sites or any other category that seems obviously dangerous. But I do a lot of surfing for information and answers and once in a while I get a warning - which I always heed. But these recent warnings would seem to imply that I am visiting a site or sites which Norton does not warn me about, yet which engage in some possibly nefarious activity. I want to know which sites those are. That’s what this is all about. It’s not about globalupload.io, it’s about knowing what actually caused any of these warnings.

i think some of these notices your are getting could be from pop up ads, i.e. your on a site and maybe click for a article or something and a ad appears type scenerio

Norton Community is primarily user-to-user < working > product help.

Do you know if you had globalupload.io or guardiandatasystems.com tabs open?

Malware attacks: What you need to know here
What are drive-by downloads here
What Are Malicious Websites and Drive by Downloads here
Malware Blog here

Probably, but which ones?

I asked nothing about my norton account.

I give up. Let’s cancel this.

i cant say for sure i can be on a phone related or news site and get them ( rare on those) but on a sports site i can seem them more , often you will notice a pop up in the browser tab ( left corner usually) or on the page intself for example. in general the ones i noticed are not malicious just pop ups ads for some product or service what would be a general type ad but can get annoying pop up if that makes sense. but need to remember not all ads are safe

Hello @FatBear
are you seeing “this message” here every time you open your browser?
OR
are you seeing a Norton message every time you open your browser?

I’m imagining you’d know what website you’re on when you open your browser and see a Norton message…every time you open your browser.

Did you clear browser cookies n cache?
Do you run browser sync?
Did you recently install any program / browser extension?
Did you recently allow push notifications?
Did you recently change site permissions?
Did you run Norton Full Scan?
Did you run Malwarebytes Scan?

Regards w Respect