Website False Positive Been Waiting on Norton to fix 2 months now, HELP!

[user13898]

okay, just sent this to developers, give me a couple days to respond here.

[bjm]

@user13898

okay, just sent this to developers, give me a couple days to respond here.

Hello @user13898
fwiw ~ my understanding: the detection is correct and there is still malware on the page

[bjm]

https://thecochranoriental.com/

Threat name: URL:Phishing
URL: thecochranoriental.com
Detected by: Web Shield | URL scanning
Alert ID: b70b532167d6

4ae9c9d6fff1/2026-10-01T12:39:55.143Z

Threat name - URL:CardStealer
Web Skimming - This threat injects malicious code into web payment pages to steal bank card details or make unauthorized payments.

URL:CardStealer is Norton’s URL-reputation flag for a page it believes is running Magecart-style payment skimming code — malicious JavaScript injected into a checkout/cart page that captures card numbers, CVV, and billing details as the customer types them.

Flag	Where it fires	What it means
URL:CardStealer	URL/page scanning (Norton Safe Web)	The page itself appears to exfiltrate payment data
JS:CardStealer-HS [Trj]	Content scanning / download	A specific script file matches a card-stealer signature (“HS” = heuristic)
URL:Phishing	URL scanning	Page impersonates a legit site to harvest credentials

AI sourced content may make mistakes

[SoulAsylum]

@SoulAsylum

CVE-2026-27212

Is your developer able to verify that version 12.1.2. of Swiper has been installed to remediate the vulnerability? Have they checked both NODE and BUN runtimes?

SA

[bjm]

Threat name: URL:Phishing
URL: thecochranoriental.com
Detected by: Web Shield | URL scanning
Alert ID: 0e0756036526