Norton nonstop URL:Malvertising popup: addmitab.com

[Oki-Norton]

Issue abstract: f73af90c3e94/2024-12-28T00:53:28.458Z

Detailed description: Norton 360 warning pops up nonstop due to URL:Malvertising when using Google Chrome. Norton Popup on every website I get. No problem with Firefox. Total Scan done, no Virus.

Product & version number: Norton 360 ---- 24.12.9725 (Build 24.12.9725.897)

OS details: Win 10 / 64bit

What is the error message you are seeing? URL:Malvertising…ID: f73af90c3e94/2024-12-28T00:53:28.458Z

If you have any supporting screenshots, please add them:

[chisungetta]

Is there a fix to this pop-up? I am having the same problem. Every time I open a page or website, I get this pop-up saying “Threat Secured. We prevented your connection to addmitlab.com because it is a dangerous webpage. Threat category: URL: Malvertising”. It asks me to scan my computer. I scan my computer and nothing shows up. It started on Google Chrome but now also happens on Microsoft Edge and Norton Private Browser. The pop-up is annoying because it happens on every website or webpage I open. Every click results in this pop-up. What are the solutions?

[bjm]

False Positive and False Negative Submissions Portal [here]

Submit a file or URL to Norton [here]

Report a suspected incorrect detection to Norton [here]

Respond to incorrect Norton alerts that a file is infected or a program or website is suspicious [here]

fwiw ~ as test:
https://addmitab.com/api redirects to https://www.google.com/

addmitab.com

[bjm]

We resolved the domain addmitab.com to IP address 104.21.42.127
104.21.42.127 was not found in our database
ISP Cloudflare, Inc.
Usage Type Content Delivery Network
ASN Unknown
Domain Name cloudflare.com
Country United States of America
City San Francisco, California

1/94 security vendor flagged this domain as malicious
addmitab.com
Creation Date 5 months ago
Last Analysis Date a moment ago
https://www.virustotal.com/gui/domain/addmitab.com

3 detected files communicating with this IP address
104.21.42.127(104.20.0.0/15)
AS 13335( CLOUDFLARENET )
https://www.virustotal.com/gui/ip-address/104.21.42.127/relations

No security vendors flagged this URL as malicious
https://addmitab.com/api
Status 200
VirusTotal report here

https://addmitab.com/api
No Malware Found
Our scanner didn’t detect any malware
Site is not Blacklisted
9 Blacklists checked
Redirects to: https://www.google.com/
IP address: 104.21.42.127
Hosting: Unknown
Running on: Gws
CMS: Unknown
Powered by: Unknown
https://sitecheck.sucuri.net/results/https/addmitab.com/api

Did you clear browser cookies n cache?
Do you run browser sync?
Did you recently install any program / browser extension?
Did you recently allow push notifications?
Did you recently change site permissions?
Did you run Norton Full Scan?
Did you run Malwarebytes Scan?

How to install and run a scan with Malwarebytes [here]

Were my machine and I wanted reassurance.
I’d ask Malwarebytes Malware Removal Help Forums [here] to check my machine.

[bjm]

@Oki-Norton , @chisungetta
Please post progress

[Puzzler]

@Oki-Norton @chisungetta I scanned the url addmitab.com using VirusTotal. No security vendor flagged the site as suspicious. Here’s the link to the scan result. VirusTotal

[Oki-Norton]

Hi, didn’t check yet. Yes I cleared cache and run total scan on that day…will report once back online on desktop PC

[Oki-Norton]

Hi Puzzler, this means I have to put this site to the whitelist to make popups stopping ? Thank you by the way!

[bjm]

https://addmitab.com/api

fwiw ~ as test: Safe Web disabled
https://addmitab.com/api redirects to https://www.google.com/

False Positive and False Negative Submissions Portal [here]

[Oki-Norton]

Hi bjm, just submitted a false positive report as per your link. thank you. however, as long it is not solved, I can’t use Chrome…

[bjm]

@Oki-Norton

Hi bjm, just submitted a false positive report as per your link. thank you. however, as long it is not solved, I can’t use Chrome…

URL:Malvertising may be unique to your Chrome browser profile…my Chrome works okay.

and you’ve added https://addmitab.com/apito Safe Web exclusions?
…if you do not agree with Norton.

Learn more about Safe Web [here]

========================================

Remove Addmitad.com Pop-up Ads [Virus Removal Guide] here

Did you run Malwarebytes Scan?

How to install and run a scan with Malwarebytes [here]

Were my machine and I wanted reassurance.
I’d ask Malwarebytes Malware Removal Help Forums [here] to check my machine.

[Oki-Norton]

No I did not, unless I get an advice put it into safe web exclusions…ok then I’ll do that. Thank you & have a nice hollidays!

[bjm]

Did you clear browser cache?
Do you run browser sync?
Did you recently install any program / browser extension?
Did you recently allow push notifications?
Did you recently change site permissions?
Did you run Norton Full Scan?
Did you run Malwarebytes Scan?

Did you review:
Remove Addmitad.com Pop-up Ads [Virus Removal Guide] [here]

Did you run Malwarebytes Scan?

How to install and run a scan with Malwarebytes [here]

Were my machine and I wanted reassurance.
I’d ask Malwarebytes Malware Removal Help Forums [here] to check my machine.

[Oki-Norton]

It is Addmitab not Addmitad…both same malware ? I have to install malwarebytes first and let do the check.

[bjm]

@Oki-Norton

It is Addmitab not Addmitad…both same malware ?

Yes…my bad…it is addmitab not addmittad

https://addmitab.com/ = 404 Not Found

https://addmitab.com/api redirects to https://www.google.com/

[bjm]

are you still seeing URL:Malvertising ?

[Puzzler]

@Oki-Norton I don’t want to cause unnecessary concern but when I ran addmitab.com at VirusTotal just now, one vendor is reporting the site as malicious so that’s changed since the other day. But to put it in perspective, it’s one out of 96 vendors but thought you should know. Here’s a partial screenshot.

[chisungetta]

Did you clear browser cookies n cache? NO
Do you run browser sync? NO
Did you recently install any program / browser extension? NO
Did you recently allow push notifications? NO
Did you recently change site permissions? NO
Did you run Norton Full Scan? YES
Did you run Malwarebytes Scan? NO

I do not have the pop-up happening anymore.

[bjm]

@chisungetta

I do not have the pop-up happening anymore.

Thanks