Hello Norton Community Team,
I am the authorized website administrator for Duluth Med Spa and need help escalating two unresolved Norton Safe Web false-positive classifications:
We already submitted both URLs through Norton’s official false-positive portal. However, Norton Safe Web still rates both URLs as “Warning,” identifies the threat as “URL: Scam,” and is blocking customers from accessing the business.
The main WordPress website experienced a previous security incident, but it was fully remediated. The affected files and database were cleaned, and WordPress, plugins, themes, passwords, and security controls were updated.
Flywheel completed a server-level malware scan on August 30 and confirmed that the website is malware-free. Independent scans also found no current malware, injected code, malicious redirects, spam, or defacement.
The store is hosted separately on GoHighLevel. It does not use WordPress and was not affected by the original security incident.
CRDF, Gridinsoft, and FortiGuard have removed their previous malicious classifications. FortiGuard manually reviewed the main website and reclassified it as “Society and Lifestyles.” SOCRadar is the only other provider still being addressed.
The Norton warnings are causing documented losses of customers, orders, and bookings. Could a Norton employee please escalate both URLs to the Safe Web threat-intelligence team for an urgent manual review?
If Norton believes either URL remains unsafe, please provide the exact URL path, detection date, threat indicator, file, script, or redirect responsible so we can investigate it immediately.
Thank you.
