Norton Blocking a Secure Website

[user5349]

We recently launched two websites. Both of which are secure but being flagged by Norton in Edge. We’ve built multiple sites before these, but somehow Norton’s web extension in Edge is marking these sites are dangerous. When I run a scan of the website on Norton’s SafeWeb they are marked as safe.

This is extremely frustrating. I’ve added in the Meta Tag data to both sites and verified each. I also re-submitted another dispute and filed a false positive compliant with Norton. Can someone please let me know what else there is to do to address this issue?

[bjm]

@user5349

We recently launched two websites. Both of which are secure but being flagged by Norton in Edge. We’ve built multiple sites before these, but somehow Norton’s web extension in Edge is marking these sites are dangerous. When I run a scan of the website on Norton’s SafeWeb they are marked as safe.

This is extremely frustrating. I’ve added in the Meta Tag data to both sites and verified each. I also re-submitted another dispute and filed a false positive compliant with Norton. Can someone please let me know what else there is to do to address this issue?

Hello @user5349

Care to share website domain name/address? [ space name to break link ]

==================================================

Please review: https://community.norton.com/t/url-phishing/375741/21

Please review: https://community.norton.com/t/url-phishing/375741/25

~ this process [here] works for me to reach: Live Agent
Norton support via Social Support | Chat | Phone [here]

[user5349]

Thank you. I sent you an email with the URLs. I’ve taken the steps you’ve outlined and have not had any luck. The websites are still being flagged as dangerous. What else can I do? This has a large negative impact on our brands. It’s unacceptable.

[bjm]

@user5349

Thank you. I sent you an email with the URLs. I’ve taken the steps you’ve outlined and have not had any luck. The websites are still being flagged as dangerous. What else can I do? This has a large negative impact on our brands. It’s unacceptable.

Hello @user5349

You sent me a direct message?
Oh, you sent @MJay a direct message?

Care to share website domain name/address? [ space name to break link ]

[user5349]

s-hsearch and s-hconsulting

[bjm]

and you’ve submitted false positive reports?
Submit a file or URL to Norton for review here
Norton submission portal to submit the File or URL sample:https://submit.norton.com
https://s-hsearch.com

fcf0ea0503a1/2025-04-02T19:14:01.258Z
aa19f8c81c9f/2025-04-02T19:14:02.058Z

https://safeweb.norton.com/report?url=https://s-hsearch.com

https://s-hconsulting.com

104c398db023/2025-04-02T19:16:20.576Z
a17fd15d7426/2025-04-02T19:16:21.201Z

https://safeweb.norton.com/report?url=https://s-hconsulting.com

[user5349]

Yes, I submitted the false positive reports earlier today. Here is my request ID: c21054f5-4117-42f5-b143-5164cb66bea4

[bjm]

https://s-hsearch.com
https://s-hconsulting.com

https://submissions.norton.com/submitsample#pc

[bjm]

@user5349

Yes, I submitted the false positive reports earlier today. Here is my request ID: c21054f5-4117-42f5-b143-5164cb66bea4

as per @MJay EMPLOYEE

After 24 hours, try visiting the website again. If Norton still blocks it, we consider it as malicious. If you’re sure that the website is clean, contact our support.

~ this process [here] works for me to reach: Live Agent
Norton support via Social Support | Chat | Phone [here]

==============================================

We resolved the domain s-hsearch.com to IP address 141.193.213.21
IP Abuse Reports for 141.193.213.21:

This IP address has been reported a total of 116 times from 33 distinct sources. 141.193.213.21 was first reported on March 20th 2023, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

https://www.abuseipdb.com/check/141.193.213.21

We resolved the domain s-hconsulting.com to IP address 141.193.213.20
IP Abuse Reports for 141.193.213.20:

This IP address has been reported a total of 11 times from 8 distinct sources. 141.193.213.20 was first reported on January 26th 2025, and the most recent report was 21 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

https://www.abuseipdb.com/check/141.193.213.20

No security vendors flagged this URL as malicious
https://s-hsearch.com/
Last Analysis Date a moment ago
https://www.virustotal.com/gui/url/e3e696e272228df510ec9b392

No security vendors flagged this URL as malicious
https://s-hconsulting.com/
Last Analysis Date a moment ago
https://www.virustotal.com/gui/url/d0b6710c05b34a0e29c2d5e7b1

@user5349

We recently launched two websites. Both of which are secure but being flagged by Norton in Edge. We’ve built multiple sites before these, but somehow Norton’s web extension in Edge is marking these sites are dangerous. When I run a scan of the website on Norton’s SafeWeb they are marked as safe.

This is extremely frustrating. I’ve added in the Meta Tag data to both sites and verified each. I also re-submitted another dispute and filed a false positive compliant with Norton. Can someone please let me know what else there is to do to address this issue?

Hello @user5349
as test: Chrome 135.0.7049.42 + Norton Safe Web 3.24.0.8 + Norton 360 Safe Web disabled
https://s-hsearch.com/

https://s-hconsulting.com/

=====================================================

=====================================================

[bjm]

Hello @user5349
as test: I reached out to Norton support to see process flow when there is a dispute between site owner and Safe Web.

Norton agent:
As I can check let me inform you that due to security reason the site is getting block through Norton, However If you allow me for a remote access of your device I would be happy to fix this issue.
Sounds good?

Norton Lv1 agent wanted remote access to show me how to exclude the blocked addresses…how to exclude the connection aborted - known dangerous webpages.
Norton Lv1 fix for this issue is add Norton 360 exclusions.
Norton Safe Web extension, as we know, does not offer local whitelist.

Norton agent:
https://submissions.norton.com/submitsample#pc
Please use the above link to submit the website and share with us and within 24 to 48 hours your issue will get resolved, and In case still facing issue then you can contact us back with the same case number and we will escalate your case to fix this issue.

Norton agent:
I would like to inform you that there is no direct link to connect to the Level 2 team and once the Information. is collect from our end. after you have submitted the request, then our team will look into the matter and investigate on the same. and then work accordingly to resolve the concern.

btw ~ Lv1 support cannot open links. Chat dialog does offer attach screenshots.
Lv1 has two views. Norton user account & Chat dialog. Lv1 does not have net access. Lv1 does not have retail Norton security solutions installed at their workstation. Lv1 needs remote access to see what we see. Lv1 asked me to open (your websites) aka known dangerous webpages on my side.

btw ~ Lv1 offered to renew my Norton 360 at best price.

[SoulAsylum]

All: FWIW, validated MJay post

Edge version Version 134.0.3124.93 (Official build) (64-bit) nails it, Norton Safe Web version
3.24.0.1 and Norton Safe Search
3.24.0.6

Opera GX: Doesn’t nail the URL *Opera is version Core:117.0.5408.162 - Chromium version:132.0.6834.210 - Safe Search version Version 3.24.0.5

SA

[bjm]

Hello @user5349

https://s-hsearch.com/
https://s-hconsulting.com/
Norton 360 Safe Web engine & Norton Safe Web extension are quiet…my side.

Please confirm Norton is quiet…your side.
Thanks

Regards w Respect

[bjm]

Hello @user5349

[bjm]

@bjm

Hello @user5349
as test: I reached out to Norton support to see process flow when there is a dispute between site owner and Safe Web.

Norton agent:
As I can check let me inform you that due to security reason the site is getting block through Norton, However If you allow me for a remote access of your device I would be happy to fix this issue.
Sounds good?

Norton Lv1 agent wanted remote access to show me how to exclude the blocked addresses…how to exclude the connection aborted - known dangerous webpages.
Norton Lv1 fix for this issue is add Norton 360 exclusions.
Norton Safe Web extension, as we know, does not offer local whitelist.

Norton agent:
https://submissions.norton.com/submitsample#pc
Please use the above link to submit the website and share with us and within 24 to 48 hours your issue will get resolved, and In case still facing issue then you can contact us back with the same case number and we will escalate your case to fix this issue.

Norton agent:
I would like to inform you that there is no direct link to connect to the Level 2 team and once the Information. is collect from our end. after you have submitted the request, then our team will look into the matter and investigate on the same. and then work accordingly to resolve the concern.

btw ~ Lv1 support cannot open links. Chat dialog does offer attach screenshots.
Lv1 has two views. Norton user account & Chat dialog. Lv1 does not have net access. Lv1 does not have retail Norton security solutions installed at their workstation. Lv1 needs remote access to see what we see. Lv1 asked me to open (your websites) aka known dangerous webpages on my side.

btw ~ Lv1 offered to renew my Norton 360 at best price.

Heard back today from Norton support wanting to know whether Safe Web issue is resolved…whether to close case. I assured Norton this Safe Web issue has resolved.

[MJay]

Hello @bjm,
glad to hear that, and sorry for the delay. I can confirm that this shall be fixed.

Can you please share with me in DM case no. for that chat? Several good points I’d like to check and learn from.

Thank you.