Note: this forum will not accept posts containing links, so all web addresses below are written in defanged form.
Issue abstract: Safe Web has rated deeringindustries[.]com “Warning” with the detection URL:Blacklist since at least 30 July 2026. A false positive submission filed on 10 August was never acknowledged and the rating has never changed. I completed site owner verification on 29 September and have resubmitted.
Detailed description:
deeringindustries[.]com is a small online retailer of automotive parts. The block stops real customers reaching the store.
Detection name: URL:Blacklist
Alert ID: 57aa70fc11c9
Affected: www[.]deeringindustries[.]com and deeringindustries[.]com. The www address 301-redirects to the apex, so both entries describe the same single site.
WHAT WE HAVE ALREADY DONE, AND WHAT CAME OF IT
10 August 2026. Filed a false positive submission through the public form. The confirmation stated review within 48 business hours. We received no acknowledgement, no reply, and no change to the rating.
11 August and 30 August. Re-checked. Still Warning.
Called Norton support. The line was automated and we could not reach a person. No case number was issued.
Left a review on the Safe Web report page. I now understand that is a community opinion and cannot affect the automated rating. That was our mistake, though the difference between “Submit Review” and “Submit Dispute” is not obvious from the page.
28 September. Still Warning, with the TAGS section empty on both addresses.
It is now 30 September. That is seven weeks past a stated 48 business hour service level, on a submission that was never acknowledged.
WHAT CHANGED YESTERDAY
On 29 September I completed Safe Web site owner verification for the first time. The www address now shows “Ownership verified”. I filed fresh submissions for both addresses the same day, including the detection name and Alert ID above.
Site owner verification is the step we had never found, and I suspect it is why nothing before now reached anyone.
One possible bug worth flagging: on the signed-in, ownership-verified site report page, the “Submit Dispute” link opens the generic sample submission page rather than a dispute form.
BACKGROUND AND CURRENT STATE
Stated plainly: the site was compromised in April 2026. It was fully remediated at the time and moved to different hosting on new infrastructure.
Re-verified on 29 September 2026. WordPress core passes official checksum verification. The uploads directory denies PHP execution at the webserver level. The most recent Wordfence scan completed clean. No files remain from the April incident window. The public page source contains no iframes and no obfuscated script.
Independent scans: VirusTotal currently shows 90 of 91 vendors raising no flag and zero rating the site malicious, including Kaspersky, BitDefender, ESET, Sophos, Fortinet, Webroot, Sucuri and Yandex Safe Browsing. The report is at virustotal[.]com/gui/domain/deeringindustries[.]com
The single remaining flag there is Gridinsoft, with whom we also have an open request.
THE ASK
The Safe Web report shows Warning with no threat listed, so there is nothing stated that I can act on. If something specific is still triggering this, I would genuinely like to know which URL or content it is so I can fix it. Otherwise I would be grateful if the rating could be re-evaluated.
Thank you.
