I'm the owner of a retail florist company and I also have an e-commerce website (online store). I've not been able to access my website since 22/2/24. It was flagged as 'Malicious Website Blocked' on my laptop and 'Malicious Website Detected' on my mobile phone. I informed my hosting company about this issue. A few days later they confirmed that there was no malware after scanning the website, including the backend. On 24/2/24, after chatting with the live agent I was told to submit my website for review. I was told to wait for the team to contact me within 24/48 hours for further verification. I waited but no one contacted me. On 1/3/24, I chatted with live agent again, this time I was told that my case had been escalated to level 2 team and was again told to wait for confirmation from the team. On 8/3/24, the live agent reassured me that the case had now been escalated to level 3 (senior level) and would surely be resolved within 24/48 hours. That was one week ago; until today I'm still unable to access my website and my online business is now at a standstill. Despite highlighting all my problems to the live agent, nothing has been done. I've tried everything but each time I came up against a brick wall. All I'm getting are empty promises from Norton, and now I'm at my wits end. Can someone please help?
https://forums.malwarebytes.com/topic/309454-vibrant-bloomscommy/
We're only blocking near.flyspecialline.com, due to bad reputation: https://www.virustotal.com/gui/domain/near.flyspecialline.com/detection
https://forums.malwarebytes.com/topic/309454-vibrant-bloomscommy/?do=findComment&comment=1623305
vibrant-blooms.com.my
URL Analysed: https: //www. vibrant-blooms.com.my/
NORTON RATING Caution
CURRENT CATEGORY Shopping | Compromised SitesDispute is already in progress.
https://safeweb.norton.com/report/show?url=https://www.vibrant-blooms.com.my
If you're a website owner, Norton Safe Web can work with you [...]
https://safeweb.norton.com/help/site-owner
````````````````````````````````````````````````
We resolved the domain vibrant-blooms.com.my to IP address 103.215.139.253
This IP address has been reported a total of 58 times from 6 distinct sources. 103.215.139.253 was first reported on November 29th 2020, and the most recent report was 2 years ago.Old Reports: The most recent abuse report for this IP address is from 2 years ago. It is possible that this IP is no longer involved in abusive activities.
https://www.abuseipdb.com/check/103.215.139.253
```````````````````````````````````````````````
vibrant-blooms.com.my
Warning: Malware Detected
Infected with malware. Immediate action is required
Redirects to: https: //www. vibrant-blooms.com.my/
IP address: 103.215.139.253
Hosting: Unknown Running on: Apache
CMS: WordPress 5.9.9 Powered by: Unknown
More Details
https://sitecheck.sucuri.net/results/vibrant-blooms.com.my
``````````````````````````````````````````
No security vendors flagged this URL as malicious
https: //vibrant-blooms.com.my/
vibrant-blooms.com.my
Status 200 Content type text/html; charset=UTF-8
https://www.virustotal.com/gui/url/41f31ec1b2d9f8cc7ad0a1ff8961168ca
Up until now, the issue is unresolved. Please refer to attached screen-shot of warning message when I tried to access my e-commerce website, domain name is vibrant-blooms.com.my.
Up until now, the issue is unresolved. Please refer to attached screen-shot of warning message when I tried to access my e-commerce website, domain name is vibrant-blooms.com.my.
MS CYC:I'm the owner of a retail florist company and I also have an e-commerce website (online store). I've not been able to access my website since 22/2/24. It was flagged as 'Malicious Website Blocked' on my laptop and 'Malicious Website Detected' on my mobile phone.
@MS CYC
Please share your "e-commerce website (online store)" domain name.
from your attach files:
- near.flyspecialline.com/nntyityujli
- repost.statisticsplatform.com/st
- crystalsa.com
We resolved the domain flyspecialline.com to IP address 104.21.76.17
IP Abuse Reports for 104.21.76.17:
This IP address has been reported a total of 1 time from 1 distinct source. It was most recently reported 1 month ago.Old Reports: The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.
https://www.abuseipdb.com/check/104.21.76.17
3 detected files communicating with this IP address|
104.21.76.17(104.16.0.0/13)
AS 13335( CLOUDFLARENET )
Last Analysis Date 1 month ago
https://www.virustotal.com/gui/ip-address/104.21.76.17/relations
near.flyspecialline.com/
Malicious Site: Malicious Domain Request 22
https://www.broadcom.com/support/security-center/attacksignatures/detail?asid=31350
No security vendors flagged this URL as malicious
https://crystalsa.com/
crystalsa.com
https://www.virustotal.com/gui/url/68da514a44d85dc10e19c31d5bb
9/93 security vendors flagged this URL as malicious
https://repost.statisticsplatform.com/
repost.statisticsplatform.com
Status 200
Content type text/html; charset=utf-8https://www.virustotal.com/gui/url/f8a042cf71811a3c21e95f334ad
16/93 security vendors flagged this URL as malicious
https://near.flyspecialline.com/
near.flyspecialline.com
Status 200
Content type text/html; charset=utf-8https://www.virustotal.com/gui/url/76dcbd0f314669bc292bf7
13/93 security vendors flagged this URL as malicious
https://flyspecialline.com/
flyspecialline.com
Status 200
Content type text/html; charset=utf-8
crystalsa.com
URL Analysed: https:// crystalsa.com
NORTON RATING Caution
CURRENT CATEGORY Suspicious
repost.statisticsplatform.com
URL Analysed: https:// repost.statisticsplatform.com/
NORTON RATING Warning
CURRENT CATEGORY Malicious Sources/Malnets
https://safeweb.norton.com/report/show?url=https://repost.statisticsplatform.com
near.flyspecialline.com
URL Analysed: https:// near.flyspecialline.com/nntyityujli
NORTON RATING Warning
CURRENT CATEGORY Malicious Sources/Malnets
https://safeweb.norton.com/report?url=near.flyspecialline.com%2Fnntyityujli
flyspecialline.com
URL Analysed: https:// flyspecialline.com/
NORTON RATING Warning
CURRENT CATEGORY Malicious Sources/Malnets | Placeholders
https://safeweb.norton.com/report/show?url=https://flyspecialline.com
near.flyspecialline.com
URL Analysed: near.flyspecialline.com/nntyityujli
NORTON RATING Warning
CURRENT CATEGORY Malicious Sources/Malnets
https://safeweb.norton.com/report?url=near.flyspecialline.com%2Fnntyityujli
repost.statisticsplatform.com
URL Analysed: repost.statisticsplatform.com/st
NORTON RATING Warning
CURRENT CATEGORY Malicious Sources/Malnets
https://safeweb.norton.com/report?url=repost.statisticsplatform.com%2Fst
crystalsa.com
URL Analysed: crystalsa.com
NORTON RATING Caution
CURRENT CATEGORY Suspicious
MS CYC:
[...] I'm still unable to access my website and my online business is now at a standstill.
Hello @MS CYC
Welcome to Norton Community
````````````````````````````````````````
what website domain?
I see:
near.flyspecialline.com/nntyityujli
repost.statisticsplatform.com/st
crystalsa.com