Norton continuously blocking safe websites

Note: Please do not post Personally Identifiable Information like email address, personal phone number, physical home address, product key etc.

Issue abstract:

Detailed description:

Product & version number:Norton 360 Standard

OS details:win 8.1

What is the error message you are seeing?Blocked URL

If you have any supporting screenshots, please add them:

Hello @Geoffrey_Pearson
care to share example/s?
~ spaces with domain name/address to break link ~

or use Preformatted text </> to break link

===================================

~ if the blocking engine is Browser Protection ~
Learn more about Browser Protection [here ]

False Positive and False Negative Submissions Portal [here]

Submit a file or URL to Norton [here]

Report a suspected incorrect detection to Norton [here]

Respond to incorrect Norton alerts that a file is infected or a program or website is suspicious [here]

COAA. is shown as a blocked URL and updates are no longer able to be downloaded. I have been using this programme for many years without any problems,

COAA?
https://coaa.com/
https://coaa.us/ ?
https://www.coaa.org/ ?
https://www.coaaweb.org/index.php ?

virustotal.com.

I’ve had a persistent problem with Norton flagging PowerShell, in C:\Windows\System32\WindowsPowerShell\v1.0. Using Norton to scan the file directly says it’s safe, but when I open it in vscode to serve website locally, the process is stopped and the browser closed. I’ve scanned it with Trend, Malwarebytes, Windows Defender, Roguekiller and all say it’s fine. So, I decided to upload the file to virustotal.com, and effing, Norton, flagged the website as a dangerous website.

I used the virtual assistant on a website to book an appointment yesterday, then today tried to use it again and received the “dangerous website blocked” notification from Norton.
I’m wondering why a site Norton allowed me to use one day is declared dangerous the next? What could have changed?

care to share website domain name / address [ space name to break link ]

or use Preformatted text </> to break link

https:// www.mic.ca / for-patients/book-an-appointment/

https://www.mic.ca/for-patients/book-an-appointment/

mic.ca
URL Analysed: https://www.mic.ca/for-patients/book-an-appointment/
Norton Rating Safe
CURRENT CATEGORY Health
https://safeweb.norton.com/report?url=https://www.mic.ca/for-patients/book-an-appointment/


24f7b693db74/2025-01-24T18:18:04.415Z

URL:Blacklist
Miscellaneous - This is malicious software that could harm
your data, computer, or network.
https://chat.mikatahealth.com/2fPuSgxqwCIKV2
C:\Program Files
(x86)\Microsoft\Edge\Application\msedge.exe
Safe Web
Connection aborted

I have screenshots but can’t send them because I’m a new user. However, the text in the Norton notification I received says:

You attempted to access https: //chat. mikatahealth .com / 2fPuSgxqwC1KV2

Threat: URL: Blacklist


24f7b693db74/2025-01-24T18:18:04.415Z

chat.mikatahealth.com
URL Analysed: https://chat.mikatahealth.com/2fPuSgxqwCIKV2
Norton Rating Safe
CURRENT CATEGORY Health
https://safeweb.norton.com/report?url=https://chat.mikatahealth.com/2fPuSgxqwCIKV2

So because the attempt to access a blacklisted URL was made by clicking on the virtual assistant button of a legitimate website, does that indicate my computer has a virus?

seems Norton objects to us calling the digital assistant

I’ve submitted false detection.
I’ll post back when/if I hear back.

But I successfully used the MIC Digital Assistant yesterday to request an appointment booking. Why did it work yesterday and is blocked today?

I’ll wait to hear back. Thank you for responding to my posts so quickly.

Sorry…no idea. Today was first time that I clicked the digital assistant.

Learn more about <Norton 360> Safe Web [here]
False Positive and False Negative Submissions Portal [here]

We received your submission and we will review it within the next 48 business hours. We will update our detection database once the result of the technical analysis is ready.

==========================================

1/96 security vendor flagged this URL as malicious
https://chat.mikatahealth.com/2fPuSgxqwCIKV2
Status 200
Content type text/html; charset=UTF-8
Last Analysis Date a moment ago
https://www.virustotal.com/gui/url/caf4cc331b3

chat.mikatahealth.com
URL Analysed: chat.mikatahealth.com
Norton Rating Safe
CURRENT CATEGORY Health
https://safeweb.norton.com/report?url=chat.mikatahealth.com

Will Norton be able to tell me why when I click the MIC Digital Assistant button it routes to that blacklisted URL and how to get it to stop routing me there?

I deeply appreciate the blocking of the dangerous website but I hope this issue can be resolved because now I can’t use that function on that website; I’ll always, for very good reason, get that notification because that button on the MIC site will route me to the blacklisted url.

Norton objects to https://chat.mikatahealth.com/2fPuSgxqwCIKV2

cf3db3e96e96/2025-01-24T18:43:33.194Z

Learn more about <Norton 360> Safe Web [here]
False Positive and False Negative Submissions Portal [here]

Ok, I’ll wait for the report. But FYI, I did just try again in a new window and still received the dangerous website notification. : (

Yes…me too.

===================================

No Malware Found
Our scanner didn’t detect any malware
Site is not Blacklisted 9 Blacklists checked
https://chat.mikatahealth.com/2fPuSgxqwCIKV2
IP address: 100.28.201.155
Hosting: Amazon AWS
Running on: Netlify
https://sitecheck.sucuri.net/results/https/chat.mikatahealth.com/2fPuSgxqwCIKV2

Will I receive a notification when the report is in or is that internal? What process should I be expecting?