I am getting a pop up warning from Norton that a malicious site has been blocked (it is https : // mawisa . botateyime . com /scripts / js?k=...), this is regardless of the web site that I am actually trying to access (eg my local council). Norton has not found any virus etc on the pc, the browser being used is Google Chrome. Any ideas on solving this please?
https://safeweb.norton.com/report/show?url=https://mawisa.botateyime.com = Safe
https://safeweb.norton.com/report/show?url=https://mawisa.botateyime.com/scripts/js = Safe
Sucuri results
https://sitecheck.sucuri.net/results/https/mawisa.botateyime.com = Scan failed | Site is not Blacklisted
https://sitecheck.sucuri.net/results/https/mawisa.botateyime.com/scripts/js = Scan failed | Site is not Blacklisted
VirusTotal
https:// mawisa.botateyime.com = 1/85 - 2021-04-13 [here]
https:// mawisa.botateyime.com/scripts/js = 1/85 - 2021-04-13 [here]
Safe Web Report
https://safeweb.norton.com/report/show?url=https://mawisa.botateyime.com = Warning
https://safeweb.norton.com/report/show?url=https://mawisa.botateyime.com/scripts/js = Warning
Sucuri results
https://sitecheck.sucuri.net/results/https/mawisa.botateyime.com = Scan failed | Site is not Blacklisted
https://sitecheck.sucuri.net/results/https/mawisa.botateyime.com/scripts/js= Scan failed | Site is not Blacklisted
VirusTotal
https:// mawisa.botateyime.com = 1/85 - 2021-04-13 [here]
https:// mawisa.botateyime.com/scripts/js = 1/85 - 2021-04-13 [here]
https://mawisa.botateyime.com/scripts/js?k=extension://fnpbeacklnhmkkilekogeiekaglbmmka/content/ui/blockedPage.html?originalURL=https://mawisa.botateyime.com/scripts/js?k=&blockPageType=IPS&IpsSignature=31992
Web Attack: Malicious Website Request 10
https://www.broadcom.com/support/security-center/attacksignatures/detail?asid=31992
Web Attack: Malicious Website Request 11
https://www.broadcom.com/support/security-center/attacksignatures/detail?asid=31993
Safe Web Report
https://safeweb.norton.com/report/show?url=https://mawisa.botateyime.com = Untested
https://safeweb.norton.com/report/show?url=https://mawisa.botateyime.com/scripts/js = Untested
Sucuri results
https://sitecheck.sucuri.net/results/https/mawisa.botateyime.com = = Scan failed | Site is not Blacklisted
https://sitecheck.sucuri.net/results/https/mawisa.botateyime.com/scripts/js = Scan failed | Site is not Blacklisted
VirusTotal
https:// mawisa.botateyime.com = 0/85 - 2021-04-12 [here]
https:// mawisa.botateyime.com/scripts/js = 1/85 - 2021-04-12 [here]
I think you are right, thanks.
Just my thinking out loud.
At some point, there could have been some change to a security setting in Chrome. If you just reinstall, I believe it still picks up your old Profile information, which would still have the old settings. When you refresh, you get a new, clean profile.
Gave that suggestion a try but no change, thanks anyway peterweb. I tried uninstalling and then reinstalling Chrome but no luck however carrying out a reset seems to have cleared the issue. Although this was in effect a Chrome problem Norton was thankfully able to recognise that the site that it was trying to redirect me too was malicious and therefore block it but it is of concern that Norton was unable to to detect the virus or whatever it was that had infected Chrome and set up the redirect in the first place. Any ideas on why this may be anyone?
Thanks peterweb I'll give that a try
i
This sounds similar to what is reported in this thread. https://community.norton.com/en/comment/8503170#comment-8503170
Try the same suggestions made there.