Safe Web mis-match

https://eastcarolina.my.site.com/

https://eastcarolina.my.site.com/graduate/TX-CommunitiesSelfReg

https://eastcarolina.my.site.com/graduate/TX-CommunitiesSelfReg startURL=%2Fgraduate%2FTargetX-Base—Portal

95a472b35ebe/2026-01-17T16:05:06.266Z
56bc4b615e0c/2026-01-17T16:05:06.932Z

===================================

===================================


ccfabd7db8cc

====================================

https://eastcarolina.my.site.com/graduate/TX-CommunitiesSelfReg

59fe35d27432/2026-01-17T16:57:36.148Z

===================================

95a472b35ebe/2026-01-17T16:05:06.266Z
56bc4b615e0c/2026-01-17T16:05:06.932Z
ccfabd7db8cc
59fe35d27432/2026-01-17T16:57:36.148Z

No response nor change…at this time.

1 Like

received response & change

====================================

https://eastcarolina.my.site.com/

===================================

https://eastcarolina.my.site.com/graduate/TX-CommunitiesSelfReg

===================================

https://eastcarolina.my.site.com/graduate/TX-CommunitiesSelfReg startURL=%2Fgraduate%2FTargetX-Base—Portal

================================

waiting for site owner confirmation

We are experiencing the exact same issue on our website. Norton’s Safe Web will mark it as safe but will be blocked by the Norton on our desktop. I have tried submitting a report multiple times through the Report False Positives page and I haven’t received a response. How can I get Norton technicians to review this?

1 Like

Hello @Catalyst

Care to share website domain name/address…please space name to break link.

==================================================

Submit a file or URL to Norton for review here

Note: after submitting dispute and waiting 48 business hours with no change.
Please contact Norton support and advise support that you’ve submitted dispute and waited 48 business hours. My understanding is…once you state that you have already submitted False Positive over the submission portal and waited 48 business hours…support agent shall take the URL and detection screenshot and advance the case.

Contact Chat Support and Norton Phone Number (related notes here)

Yes, it’s these four pages:

https:// catalystsd .org/what-we-do/learning-connecting/

https:// catalystsd .org/what-we-do/collaborative-action/

https:// catalystsd .org/what-we-do/impact-investing/

https:// catalystsd .org/what-we-do/customized-support/

1 Like

Hello @Catalyst

https://catalystsd.org/what-we-do/customized-support/


990ee63001e5/2026-01-21T20:26:49.310Z

d3e6323a798a

======================================

https://catalystsd.org/what-we-do/learning-connecting
6c6fb9f869c4/2026-01-21T20:22:21.012Z
37249fbf278c

https://catalystsd.org/what-we-do/collaborative-action/
0f999f6c7069/2026-01-21T20:23:17.988Z
bdd9fc038077

https://catalystsd.org/what-we-do/impact-investing/
00df0b2c0482/2026-01-21T20:26:08.750Z
d88a5e3dfe85

https://catalystsd.org/what-we-do/customized-support/
990ee63001e5/2026-01-21T20:26:49.310Z
d3e6323a798a

===============================================

================================================

Submit a file or URL to Norton for review here

Note: after submitting dispute and waiting 48 business hours with no change.
Please contact Norton support and advise support that you’ve submitted dispute and waited 48 business hours. My understanding is…once you state that you have already submitted False Positive over the submission portal and waited 48 business hours…support agent shall take the URL and detection screenshot and advance the case.

Contact Chat Support and Norton Phone Number (related notes here)

====================================

Norton support case number 96nnnn60
21-Jan-2026

=================================

=================================

2 Likes

Amazing, thank you! We are also having this issue with our subdomain, http:// go. catalystsd .org. Same thing, it’s cleared as safe on Norton Safe Web but flagged on my desktop. Would it be possible to take a look at this one as well?

1 Like

https://go.catalystsd.org


3e867040b38f


05a0219b1737/2026-01-21T21:44:09.233Z
1113b12708a2/2026-01-21T21:44:09.233Z

==============================================

==============================================

Submit a file or URL to Norton for review here

Note: after submitting dispute and waiting 48 business hours with no change.
Please contact Norton support and advise support that you’ve submitted dispute and waited 48 business hours. My understanding is…once you state that you have already submitted False Positive over the submission portal and waited 48 business hours…support agent shall take the URL and detection screenshot and advance the case.

Contact Chat Support and Norton Phone Number (related notes here)

==========================================

==========================================

______
Chrome




______
Edge

______
Norton Private Browser


______
Firefox

https://go.catalystsd.org appears to call https://catalystsd.org/

=====================================

https://go.catalystsd.org Redirect to: https://catalystsd.org/

403 Forbidden
This error code may mean the site was disabled by its hosting provider because of malware problems. The site also may be under maintenance at the moment and you should try scanning it later. Another possible reason is some parts of the website have restricted access and our scanner could not scan them.

Thank you for reviewing these! All links are now functioning normally. We manage these domains. Is there anything we did that caused them to be flagged as malicious? We just want to know what to avoid doing in the future. Thanks!

1 Like

Hello @Catalyst

fwiw ~ I did not review these. I was able to reproduce/document & report as we observed via Norton F/P submission & via Norton support.

As to what caused Norton analysis (likely automated) to flag these domains as malicious…over my pay grade.
I imagine sometimes Norton analysis follows others’ reporting and sometimes others’ follow Norton analysis.

~ for example: VirusTotal here

As to why Norton Safe Web extension vs Norton 360 Safe Web engine reporting “mis-match”.
Likely due to different databases.
fwiw ~ afaik ~
Norton Safe Web extension employs legacy Symantec technology.
Norton 360 Safe Web engine employs Gen™\Avast technology.
Norton Private Browser Web Shield employs Gen™\Avast technology.