Threat Secured - Constant Cloudfront.Net warnings URL:Phishing

Can someone explain why I am suddenly getting constant warnings from Norton 360 about Cloudfront.Net urls. It is making me lose faith in being able to trust Norton if it is continually finding all these “dangerous webpages”. These are generally normal Computer retailers’ websites. I have seen a previous post reporting similar warnings back in 2011 about Amazon webpages. What is going on Norton ??? Are these dangerous or, as I suspect, you’ve tweaked the Danger Meter up too high ?

Exact warning today but similar to many others:
Threat Secured - We prevented your connection to d1le22hyhj2ui8.cloudfront.net because it is a dangerous webpage. Threat category: URL:Phishing

@Adam0310 First off a bit more info about your scenario is needed, such as:

-What is your OS, its version and build?
-What is the version and release build of Norton?
-What browser were you using when this happens?
-Were you using a VPN when this happens?
-Is your ISP devices firmware the current version as well as any personal router you may be using?
-Have you deleted caches and cookies from all your browsers then ran a full system scan with Norton?

FYI!! Norton hasn’t tweaked any danger meter too high. Norton is detecting and blocking these intrusion attempts as it should. Please review the results my side on Opera GX browser when opening the URL you posted.

The URL is a bogus “redirect” to a non HTTPS based URL, more than likely for the purpose of downloading malware or for scanning of your network. Please review the screenshot below.

Also please review the DNS back trace I performed for you here:

https://www.ip-tracker.org/dns/lookup.php?domain=d1le22hyhj2ui8.cloudfront.net

SA

O/S is Windows 11 - 23H2 Build 22631.5262
Norton - Norton 360 - 25.4.10068 (build 25.4.10068.930) - latest definitions
Browser Chrome
Not using a VPN when it happened.
ISP devices firmware - I have absolutely no idea what the ISP uses.
My Personal Router - Has the latest firmware.
I run full cookies and cache deletion software regularly. I ran one prior to replying to this and same thing happens.

I have to doubt this warning is about genuine Malware as it has occured on websites from two separate, large and very reputable Computer retailers and I am also getting the exact same warning running the same Norton product on two completely separate PCs (the other is running Windows 10). A full scan by Norton and then Malwarebytes does not reveal any malware on my two PC’s and I have also checked the websites using SSL Trust, Sitechecker and Google Safe Browsing site. The website I notice it on most frequently as I view the site regularly is Centrecom.com.au I have reported it to them and they consider it at my end and a Norton issue and not their website issue. I do know that the site can email me after viewing items and has a record of what I was browing and sends that to me in an email if I am logged in to potentially get me to buy one of the viewed items. Maybe that is the phishing Norton is finding although I get the error whether I am logged in or not so they don’t always know who I am when browsing and still getting the error.

I have viewed that link you sent thank you however unfortunately the information means little to me - it is so full of advertising pop-ups and purchase links that I started to worry about potential malware !

I started getting the same just recently.
Windows 11 24H2 Build 26100.4061
Microsoft Edge
Norton 360 v25.4.10068 (build 25.4.10068.930)
No VPN

Note the URL, it is a secure URL.

Thanks Blaise for confirming it is not just me suddenly getting these warnings.
Now just waiting for SoulAsylum (Guru) to explain this for us !

Having submitted the URL you BOTH have at the Safe Web submission portal it gives me the following results. Looks like this is as suspected a false positive from Norton.

SA

1 Like

Thanks SoulAsylum. As a “Guru” have you submitted the false positive to Norton already ? My reporting it when I get the error message doesn’t seem to have been received by Norton HQ….

No I didn’t submit. May I suggest that you submit the URL on your end so that, you will personally get the results when that is given. You will have a direct answer and can share those results with us here if you wish.

SA

I reported it to Norton.

@Blaise Thats good, please let us know what the results are if/when they are given. Norton isn’t known for a ton of clarity and responses back to the submitter in all cases.

SA

1 Like

Thanks Blaise - I have clicked a few times on the error message itself that it is a false detection - they are supposed to investigate from that but I don’t know if they take much notice until enough people click it.

I just check the web store I was getting the false positive for… fixed. Seems like the promise made by the Norton dialog was true!

1 Like