URL: Phishing

Note: Please do not post Personally Identifiable Information like email address, personal phone number, physical home address, product key etc.

Issue abstract: I designed a web site using the functionality provided by DESIGN dot COM. The link is BOTH Norton on Windows 11 and Android block this page indicating it’s Phishing or Dangerous. It’s NOT. It only provides information. Doesn’t even ask for any information. I’ve checked with DESIGN dot COM support and after back and forth they’ve given up and won’t/can’t do anything else. They’ve asked/insisted I contact Norton directly. Has anyone every had experience with this ?

Detailed description:

Product & version number: Norton 360 Deluxe

OS details:Windows 11 Home

What is the error message you are seeing? Phishing

If you have any supporting screenshots, please add them:

Care to share website domain name/address (space name to break link)?

Learn more about <Norton 360> Safe Web [here]
Configure <Norton 360> Safe Web settings [here]

False Positive Submissions Portal [here] if you disagree with Norton

brand page/inspirationspacare

https://brand.page/inspirationspacare/
https://brand.page/inspirationspacare/services


07db49984f7d/2025-03-22T21:58:55.279Z


e02d4a5b53f6/2025-03-22T22:01:37.772Z

=========================================================

False Positive Submissions Portal [here] if you disagree with Norton

We received your submission and we will review it within the next 48 business hours. We will update our detection database once the result of the technical analysis is ready.

https://brand.page/inspirationspacare
No Malware Found
Our scanner didn’t detect any malware
Site is not Blacklisted 9 Blacklists checked
https://brand.page/inspirationspacare
IP address: 3.162.125.106
CDN: Amazon CloudFront
Running on: Unknown server
CMS: Unknown
brand.page/inspirationspacare - SiteCheck

https://www.virustotal.com/gui/ip-address/3.162.125.106/relations

==========================================


https://safeweb.norton.com/report?url=https://brand.page/inspirationspacare

===========================================

We resolved the domain brand.page to IP address 18.238.55.74
IP Abuse Reports for 18.238.55.74
This IP address has been reported a total of 1 time from 1 distinct source. It was most recently reported 11 months ago.
Old Reports: The most recent abuse report for this IP address is from 11 months ago. It is possible that this IP is no longer involved in abusive activities.
https://www.abuseipdb.com/check/18.238.55.74

https://www.virustotal.com/gui/ip-address/18.238.55.74/relations

===========================================

https://brand.page/inspirationspacare VirusTotal report here

https://www.virustotal.com/gui/ip-address/18.238.136.76/relations

=======================================================

https://www.virustotal.com/gui/ip-address/3.162.125.36/relations

as test: Norton 360 <Safe Web> disabled
https://brand.page/inspirationspacare

=============================================================

https://brand.page/inspirationspacare

https://safeweb.norton.com/report?url=https://brand.page/inspirationspacare

=============================================

==============================================


===============================================

=============================================

Site report for https://brand.page
https://sitereport.netcraft.com/?url=https://brand.page
https://www.virustotal.com/gui/ip-address/18.66.171.109/relations

=======================================

https://brand.page/tntrailerrental

https://brand.page/theartisanavenue

Hello bjm. Thanks for the research and I apologize in advance. I don’t understand what this all means. It seems to indicate that on one hand my URL is safe yet on the other hand it still blocks it. I’m using a legit company to build the webpage and I don’t collect any information (ie: phish). So what can I do ? The company that I used to build it has given up helping.

Well, I submitted false positive reports. You may also submit…false positive report…if you want.
Maybe, the hosting IP server is suspect.
Our old Community platform had @ping that worked & Norton staff…for me to ping.
Our new Community platform does not have @ping that works nor Norton staff…for me to ping.
We’ll try to call attention…best we can.
We’ll hope false positive submissions sorts you.
I’ll monitor https://brand.page/inspirationspacare

Do you know why Serving IP here is different?
are these hosting server IP addresses?
Serving IP Address 18.238.136.76
Serving IP Address 3.162.125.36

=========================================

Hello @Gerald_Soo
Norton is rating https://brand.page
and https://brand.page lands on https://www.brandcrowd.com/
https://safeweb.norton.com/report?url=https://www.brandcrowd.com

False Positive Submissions Portal [here] if you disagree with Norton
Site Owners https://safeweb.norton.com/help/site-owner

===========================================


Serving IP Address 18.238.136.80
IP address of the latest server that has been observed serving the URL.

https://www.virustotal.com/gui/ip-address/18.238.136.80/relations

https://www.virustotal.com/gui/url/2bee27f6f871ab7421fab402a1

=============================================

We resolved the domain brand.page to IP address 18.238.55.129
18.238.55.129 was not found in our database
https://www.abuseipdb.com/check/18.238.55.129

Norton = no change

==========================================

Malwarebytes = block removed here

Norton = no change

Just wanted to thank you for continually monittoring.

monitoring and submitting more false positive reports - with nary a response from Norton

====================================================

Malwarebytes Browser Guard block removed [here] in a few hours

FWIW!! I’m on Norton version 22.24.8.36, the site opens perfectly. Version 25.xx is the issue.

SA

Thanks SoulAsylum. Sadly I’m on 25.2.9898 (build 25.2.9898.919) and I hope Norton fixes this ASAP. Most folks update automatically to the latest.

You’re welcome. I just wanted to clarify and express that 25.xx is causing this issue, without any reservations. I DO have version 25.xx on one laptop being used for testing and tracking that version. Just haven’t been on it in a while. Safe Web isn’t nabbing in on my browser, Opera GX either. :wink:

SA

https://brand.page/inspirationspacare


So on one hand Norton says it’s safe and on the other hand they’re still blocking saying it’s Phishing. I’ve submitted several disputes. I’m assuming others on the latest Norton version are getting blocked as well ??

1 Like

and have you received any response?

My submitted Norton false positive reports 2 days ago received no response…no explanation from Norton…and no process to communicate with Norton. I’ve no assurance/reassurance that my submissions were received despite submission statement:

Why Norton needs 48-72 business hours to review/update…is unknown.
Malwarebytes sorts &or at least directly responds in a few hours…with as needed follow up communication. Malwarebytes Browser Guard block removed [here] in a few hours.

Norton should…send an email notice upon receipt of my submission & send a status email every 4 hours until my submission is sorted one way or the other.
I should receive an email notice that my submission is received…is in queue…is in process…requires manual review…that my submission has completed with determination…and a direct way to communicate with Norton regarding the determination.

Norton Safe Web extension reports Safe
WebPulse reports Business/Economy
Norton 360 Safe Web reports URL:Phishing

Our old Norton Community had Norton staff that helped sort issues.
Our new Norton Community does not have Norton staff to help sort issues.
@Gayathri_R

1 Like

@MJay could you please look into this?

Norton = no change nor response from my Norton submissions