×
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
davidianalyst
Contributor
Message 1 of 5

Our site is showing up as very risky. The site shows SECURE in SSL. Why is this?

Jump to solution

We manage a site for a client: DaphDaph and their site is listed as Very Risky on your service. Can you please remove it or tell us what about the site is Risky? Thank you.

https://daphdaph.com/

1 Solution

Accepted Solutions
daniel_b
McAfee Retired
McAfee Retired
Message 2 of 5

Re: Our site is showing up as very risky. The site shows SECURE in SSL. Why is this?

Jump to solution

McAfee KB - Connections to specific websites are blocked by Net Guard when ratings are not trustwort...

Problem

When you attempt to browse to a website that you believe is trustworthy, you are blocked from accessing the site by the McAfee Firewall function called Net Guard.

This function uses a repository of known good and known bad domain names and IP addresses. If you try to go to a known bad website or address, Net Guard protects you by blocking the connection.

Review the information in this article to file a ratings dispute, and/or allow blocked content.
 
 
 
Solution
If you experience issues navigating to a location that you believe is trustworthy, follow these steps: 

Check to see the rating of the web page from the TrustedSource home page:
  1. Open a web browser, and go to http://www.trustedsource.org/en/home.
  2. On the Check Single URL screen, perform the following:
    1. In the Please Select drop-down list, select McAfee Real-Time Database.
    2. Type in the domain name, URL, or IP address in the text box, then click Check URL.
       
  3. Review the categorization. If you do not agree with the categorization, follow the steps below to submit a dispute.


How to submit an IP Reputation dispute
If you believe that the rating is a false positive, you can submit a "change request" in the following way:

  1. View the categorization as described above.
  2. Below the categorization details, add up to three categorization suggestions which you believe are more appropriate.
  3. Type in an optional comment in the space provided. 
  4. Click Submit URL for Review.
If you need to access the page while the page is under review, perform the steps in the workaround below.
Workaround
If you must connect to this website you can change the website or IP address to Allow under Net Guard.

IMPORTANT: Intel Security recommends that you keep Net Guard enabled, and strongly advises you to wait for the site to be re-tested instead of changing the site to Allow. The site might have become compromised, and connecting to it could risk your computer security. If you accept this risk and still prefer to access the potentially harmful site, follow these steps:
  1. Double click the M icon in the tool tray to open Security Center.
  2. Click Navigation (or click the cog at the top right).
  3. Click Firewall, then scroll down and click Net Guard.
  4. Select the IP Address listed for the site that you want to access. NOTE: To identify the IP address by name you will need to use a DNS/IP lookup tool.
  5. Click Edit, then change Block to Allow.
  6. Click Save, or Apply.
 
NOTE: After the website is reviewed and the status changes, you can clear it from your list by selecting the item and clicking Delete. If the status remains untrustworthy, the IP address will be blocked again. You must use the steps above for any untrusted IP addresses.
Related Infomation
For general information about threats, go to http://www.mcafee.com/us/mcafee-labs/threat-intelligence.aspx.
 
DNS/IP lookup tools
While URLs and domain names allow you to more easily remember and access web resources, your connection to these resources uses IP addresses.
Net Guard also uses the IP addresses to control access. If you find multiple IP addresses in the IP Address field, use a lookup tool to find the specific IP address that you need to update. Common lookup tools include:

 

 

 
 

View solution in original post

4 Replies
daniel_b
McAfee Retired
McAfee Retired
Message 2 of 5

Re: Our site is showing up as very risky. The site shows SECURE in SSL. Why is this?

Jump to solution

McAfee KB - Connections to specific websites are blocked by Net Guard when ratings are not trustwort...

Problem

When you attempt to browse to a website that you believe is trustworthy, you are blocked from accessing the site by the McAfee Firewall function called Net Guard.

This function uses a repository of known good and known bad domain names and IP addresses. If you try to go to a known bad website or address, Net Guard protects you by blocking the connection.

Review the information in this article to file a ratings dispute, and/or allow blocked content.
 
 
 
Solution
If you experience issues navigating to a location that you believe is trustworthy, follow these steps: 

Check to see the rating of the web page from the TrustedSource home page:
  1. Open a web browser, and go to http://www.trustedsource.org/en/home.
  2. On the Check Single URL screen, perform the following:
    1. In the Please Select drop-down list, select McAfee Real-Time Database.
    2. Type in the domain name, URL, or IP address in the text box, then click Check URL.
       
  3. Review the categorization. If you do not agree with the categorization, follow the steps below to submit a dispute.


How to submit an IP Reputation dispute
If you believe that the rating is a false positive, you can submit a "change request" in the following way:

  1. View the categorization as described above.
  2. Below the categorization details, add up to three categorization suggestions which you believe are more appropriate.
  3. Type in an optional comment in the space provided. 
  4. Click Submit URL for Review.
If you need to access the page while the page is under review, perform the steps in the workaround below.
Workaround
If you must connect to this website you can change the website or IP address to Allow under Net Guard.

IMPORTANT: Intel Security recommends that you keep Net Guard enabled, and strongly advises you to wait for the site to be re-tested instead of changing the site to Allow. The site might have become compromised, and connecting to it could risk your computer security. If you accept this risk and still prefer to access the potentially harmful site, follow these steps:
  1. Double click the M icon in the tool tray to open Security Center.
  2. Click Navigation (or click the cog at the top right).
  3. Click Firewall, then scroll down and click Net Guard.
  4. Select the IP Address listed for the site that you want to access. NOTE: To identify the IP address by name you will need to use a DNS/IP lookup tool.
  5. Click Edit, then change Block to Allow.
  6. Click Save, or Apply.
 
NOTE: After the website is reviewed and the status changes, you can clear it from your list by selecting the item and clicking Delete. If the status remains untrustworthy, the IP address will be blocked again. You must use the steps above for any untrusted IP addresses.
Related Infomation
For general information about threats, go to http://www.mcafee.com/us/mcafee-labs/threat-intelligence.aspx.
 
DNS/IP lookup tools
While URLs and domain names allow you to more easily remember and access web resources, your connection to these resources uses IP addresses.
Net Guard also uses the IP addresses to control access. If you find multiple IP addresses in the IP Address field, use a lookup tool to find the specific IP address that you need to update. Common lookup tools include:

 

 

 
 
ShivaNaidu
Contributor
Message 3 of 5

Re: Our site is showing up as very risky. The site shows SECURE in SSL. Why is this?

Jump to solution

If your website displays as "SECURE" in terms of SSL (Secure Sockets Layer) but is still labelled as "very risky," it's critical to note that SSL only handles one component of website security: data encryption between the user's browser and the web server.

There are other variables, though, can contribute to a website being considered as dangerous.

Here are some possible reasons (as per my personal experiences) why your site might be considered risky despite having an SSL certificate.

  1. Outdated or Vulnerable Software
  2. Content or Malware Issues
  3. Phishing or Scam Elements
  4. IP Blacklisting
  5. Data Privacy Concerns
  6. Security Headers (CSP & HTTP Security issue)

To address the perceived riskiness of your website, you should conduct a thorough security audit, address any identified issues, and regularly monitor your site's security. Additionally, you may want to use online security scanners or tools to assess your website's security posture and identify potential vulnerabilities or risks that need attention.

Chauffeur
Contributor
Message 4 of 5

Re: Our site is showing up as very risky. The site shows SECURE in SSL. Why is this?

Jump to solution

My website Mehditravelservices.com is showing the same please help

nitubisht
Contributor
Message 5 of 5

Re: Our site is showing up as very risky. The site shows SECURE in SSL. Why is this?

Jump to solution

If your website is labeled as risky despite having SSL encryption, there could be various reasons for this perception.

Here are some common issues to consider as Malware or Security Threats, Blacklisting, Outdated Software, Insecure Passwords, Security Headers etc.

To troubleshoot and address these issues, you may need to work with your hosting provider, security experts, and potentially consult with the support resources provided by the platform or CMS you are using for your website.

How Many Badges Can You Collect?
Ready for a little competition? Members like you are earning badges and unlocking perks for their helpful answers. Are you? Click here to find out.

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community