Our site is showing up as very risky. The site shows SECURE in SSL. Why is this?

[davidianalyst]

We manage a site for a client: DaphDaph and their site is listed as Very Risky on your service. Can you please remove it or tell us what about the site is Risky? Thank you.

https://daphdaph.com/

[daniel_b · Accepted solution]

McAfee KB - Connections to specific websites are blocked by Net Guard when ratings are not trustwort...

Problem

When you attempt to browse to a website that you believe is trustworthy, you are blocked from accessing the site by the McAfee Firewall function called Net Guard.

This function uses a repository of known good and known bad domain names and IP addresses. If you try to go to a known bad website or address, Net Guard protects you by blocking the connection.

Review the information in this article to file a ratings dispute, and/or allow blocked content.
 

Solution

If you experience issues navigating to a location that you believe is trustworthy, follow these steps: 

Check to see the rating of the web page from the TrustedSource home page:

1. Open a web browser, and go to http://www.trustedsource.org/en/home.
2. On the Check Single URL screen, perform the following:
   1. In the Please Select drop-down list, select McAfee Real-Time Database.
   2. Type in the domain name, URL, or IP address in the text box, then click Check URL.
       
3. Review the categorization. If you do not agree with the categorization, follow the steps below to submit a dispute.

How to submit an IP Reputation dispute
If you believe that the rating is a false positive, you can submit a "change request" in the following way:

1. View the categorization as described above.
2. Below the categorization details, add up to three categorization suggestions which you believe are more appropriate.
3. Type in an optional comment in the space provided. 
4. Click Submit URL for Review.

If you need to access the page while the page is under review, perform the steps in the workaround below.

Workaround

If you must connect to this website you can change the website or IP address to Allow under Net Guard.

IMPORTANT: Intel Security recommends that you keep Net Guard enabled, and strongly advises you to wait for the site to be re-tested instead of changing the site to Allow. The site might have become compromised, and connecting to it could risk your computer security. If you accept this risk and still prefer to access the potentially harmful site, follow these steps:

1. Double click the M icon in the tool tray to open Security Center.
2. Click Navigation (or click the cog at the top right).
3. Click Firewall, then scroll down and click Net Guard.
4. Select the IP Address listed for the site that you want to access. NOTE: To identify the IP address by name you will need to use a DNS/IP lookup tool.
5. Click Edit, then change Block to Allow.
6. Click Save, or Apply.

NOTE: After the website is reviewed and the status changes, you can clear it from your list by selecting the item and clicking Delete. If the status remains untrustworthy, the IP address will be blocked again. You must use the steps above for any untrusted IP addresses.

Related Infomation

For general information about threats, go to http://www.mcafee.com/us/mcafee-labs/threat-intelligence.aspx.
 

DNS/IP lookup tools

While URLs and domain names allow you to more easily remember and access web resources, your connection to these resources uses IP addresses.
Net Guard also uses the IP addresses to control access. If you find multiple IP addresses in the IP Address field, use a lookup tool to find the specific IP address that you need to update. Common lookup tools include:

• Nslookup - a command line tool
• Ping - a command line tool 
• www.DNSstuff.com - a website resource
• https://DNSquery.org - a website resource

[ShivaNaidu]

If your website displays as "SECURE" in terms of SSL (Secure Sockets Layer) but is still labelled as "very risky," it's critical to note that SSL only handles one component of website security: data encryption between the user's browser and the web server.

There are other variables, though, can contribute to a website being considered as dangerous.

Here are some possible reasons (as per my personal experiences) why your site might be considered risky despite having an SSL certificate.

1. Outdated or Vulnerable Software
2. Content or Malware Issues
3. Phishing or Scam Elements
4. IP Blacklisting
5. Data Privacy Concerns
6. Security Headers (CSP & HTTP Security issue)

To address the perceived riskiness of your website, you should conduct a thorough security audit, address any identified issues, and regularly monitor your site's security. Additionally, you may want to use online security scanners or tools to assess your website's security posture and identify potential vulnerabilities or risks that need attention.

[Chauffeur]

My website Mehditravelservices.com is showing the same please help