• All Community
    • All Community
    • Forums
    • Ideas
    • Blogs
Advanced

Not what you are looking for? Ask the experts!

Kudos0

URGENT - My local hospital's site is rated as DANGEROUS and also SAFE

Norton gave me these warnings yesterday when I went to access my local hospital's website:

This is what the Detailed Report said:

I'm a Volunteer there and have contacts with their Council and Exec. The Foundation Trust is having an inspection soon by the UK Regulatory body; the general public need to have open access and not be put off by your warnings. They see no reason why they should contact Norton given the number of actual 'threats' and are content to leave it with me to resolve. But in that respect as you have no idea who I am and whether I actually have the authority I say I have, you probably won't change the rating.

But will you change it if I tell you that on a Google search I found at least two entries for the Trust website where Norton shows it as Safe?!!!

I'd be grateful for an Urgent review, given the CQC visit. For non-UK members here, CQC are very important people with huge powers - http://www.cqc.org.uk/

Thanks Norton

Win10 Home v1803 build 17134.345/HP envy/EDGE (rubbish)/IE11 (RIP)11.285.17134.0/ OFFICE 365 Home Personal/Norton Security

Replies

Kudos0

Re: URGENT - My local hospital's site is rated as DANGEROUS and also SAFE

Hi Taffy,

I've brought your post to the attention of the Safe Web Team. They usually post back in the user's thread in one or two days but please note that due to the weekend this time it could take a bit longer.

Thanks.

Windows 7 HP SP1 32-bit | Chrome 65.0.3325.146 | NS 22.12.1.15
Kudos0

Re: URGENT - My local hospital's site is rated as DANGEROUS and also SAFE

Hello Taffy

You usually have to be the owner of the website to get changes to the testing done. In this case it is a phishing attack in some sort of a demo that has caused the dangerous rating. The ownership has to be verified and a meta tag has to be placed on the website.

I don't know if the Safe Web Team will make an exception to their rule or not. This is really something that the webhost of the website should be doing rather than a volunteer who uses the website and visits the hospital. As Rainbow has said, you will have to wait until at least Monday morning UK time before they would post back here.

Thanks.

Success always occurs in private and failure in full view. Windows 10 Pro 64 bit Norton Core Security Plus 22.17.3.50 Core Firmware 282 I E 11 Chrome latest version.
Kudos0

Re: URGENT - My local hospital's site is rated as DANGEROUS and also SAFE

Taff

I've just used the URL link -- http://www.cqc.org.uk/ --  at the end of your message and the site comes up without any warning from Norton Security Premium (NSWBU) under Windows 7 and bot Windows and NSP are fully uptodate ......

Also and for http://www.cht.nhs.uk/home/  as in your first image.

Same for http://www.this.nhs.uk/home/ which says

 The Health Informatics Service is a large well-established organisation hosted by the Calderdale and Huddersfield NHS Foundation Trust.

Note that Health Informatics' website says they are revamping themselves so .....

Have I missed something?

Hugh
Kudos0

Re: URGENT - My local hospital's site is rated as DANGEROUS and also SAFE

Good morning (here).

This is a fabulous hospital for sorting patients' problems but it is huge with over 2000 inpatients every might at its two sites. It's bureaucratic but I suppose that that's a necessity. I've had to raise this issue through a formal channel to the board and their reaction was that if I could persuade you to change it, fine. The formal way is rather longer and more intense, and they are at an extremely busy time

Rainbow_2: Much appreciated for that.

floplot: Their site was working earlier in the week. You mention the word 'demo' - might this be demo as in a demo test by one of their website team or might it have a sinister connection? There was a one-day strike/demo at all UK hospitals on Tuesday (9th) - is there any way that you can tell when the phishing attack was?

Hugh - The Health Informatics Service is their out-sourced IT Help Desk that my Trust uses - they're always revamping as they expand and take on more Trusts.

The www.cqc.org.uk site is 'Safe', as you say. I included it as it contained many links to my Trust which I thought were external links to the Trust's website. But having checked them all out, they are all internal links. My point (wrongly as I now realise and on the assumption that those links were external) queried what rating would be give to a Safe site that has external links to an unsafe site.

It'll wait until Monday, of course, but I would suggest that as Norton generate income from 'Safe Web' Site would the Safe Web Team consider contacting the Trust? If this indeed is linked to the Strike on Tuesday, Norton's help might generate more income as it's likely that other Trusts' websites have been similarly attacked?

Thanks again - much appreciated.

Win10 Home v1803 build 17134.345/HP envy/EDGE (rubbish)/IE11 (RIP)11.285.17134.0/ OFFICE 365 Home Personal/Norton Security
Kudos0

Re: URGENT - My local hospital's site is rated as DANGEROUS and also SAFE

Update: Before posting my reply above, I tried again using the address in my first post - I got the same Dangerous Website Blocked screen.

After posting I did a Norton search for Calderdale hospital trust and every site shown is marked as Safe:

I've just accessed their main website again and the Warning has gone. Perhaps some kind person in the Safe Web Team has changed it. (It couldn't have been the 'safe' rating review that I did earlier could it?

I'll wait for confirmation that it's is now official Safe before telling the Trust but I'll also try to get the date of the offending attack before I do. Thanks again.

Win10 Home v1803 build 17134.345/HP envy/EDGE (rubbish)/IE11 (RIP)11.285.17134.0/ OFFICE 365 Home Personal/Norton Security
Kudos0

Re: URGENT - My local hospital's site is rated as DANGEROUS and also SAFE

Taffy, 

When I brought your op to the attention of the Safe Web Team I mentioned that checking cht.nhs.uk/home/ with Sucuri SiteCheck only Norton gave a "Domain blacklisted" result, and it still does (cheked again a few minutes ago): https://sitecheck.sucuri.net/results/cht.nhs.uk/home/ (Blacklist Status Tab).

Also, Google search results still give the site red flagged by Norton:

Let's wait for the Safe Web Team comments.

Thanks.

Windows 7 HP SP1 32-bit | Chrome 65.0.3325.146 | NS 22.12.1.15
Kudos0

Re: URGENT - My local hospital's site is rated as DANGEROUS and also SAFE

Taff

I should have made it clear when I said "safe" I meant no popup warnings from Norton. I don't use the Norton Toolbar or Norton Safe flagging ....

Hugh
Kudos0

Re: URGENT - My local hospital's site is rated as DANGEROUS and also SAFE

thanks both. Strange though that a Search via Norton Search just now still shows the sites as Safe yet, as Rainbow_2 says Google search results still give the site red flagged by Norton!

By the way, I've just had a thought, in another thread about Norton Flags I'm sure that it was @Yank who had a screen shot showing different results from mine on an identical search and we wondered whether it was to do with the US and UK search engines operating in a different way. I might check that out tomorrow - it's 01.23 here and I need my beauty sleep! Thanks again.

Win10 Home v1803 build 17134.345/HP envy/EDGE (rubbish)/IE11 (RIP)11.285.17134.0/ OFFICE 365 Home Personal/Norton Security
Kudos1 Stats

Re: URGENT - My local hospital's site is rated as DANGEROUS and also SAFE

Hello Taffy

You are in the UK and got the warning. Rainbow is in Europe and got the warning. I'm in the USA and got the warning. I use Google and the Safe Web report is the same all over. Only some Search Engines are supported and you have to have the Annotations turned on to get them.

If you click on one of the red warnings, you will see a small arrow towards the right side. If you click on that, it will show the malwares that were found on the site. It will also give the path to the malware..

There is no way for me to determine just when the site got the blockage. I'm not on the Safe Web Team so I don't have access to their tools. I just help them out when I can. They start work around 5 AM your time, so they will post back to your thread some time after that. I don't think the Safe Web Team will get in touch with the hospital.

What you can do is give them the link that says what they have to do to register the site and have ownership verified and then they can have the site retested. It's up to either the owners of the site or their web host to clean up the site.

Please follow instructions on this site for Safe Web Site problems.

http://safeweb.norton.com/help/site_owners

That's the link that the hospital needs to use and follow those instructions.

Thanks.

Success always occurs in private and failure in full view. Windows 10 Pro 64 bit Norton Core Security Plus 22.17.3.50 Core Firmware 282 I E 11 Chrome latest version.
Kudos0

Re: URGENT - My local hospital's site is rated as DANGEROUS and also SAFE

Thanks Floplot.

By the way, this is the thread where my search seemed to show different Safe tags to Yank's

http://community.norton.com/en/comment/6727381#comment-6727381

I don't want to start it all over again - just that I feel better now I've found it.

Win10 Home v1803 build 17134.345/HP envy/EDGE (rubbish)/IE11 (RIP)11.285.17134.0/ OFFICE 365 Home Personal/Norton Security
Accepted Solution
Kudos1 Stats

Re: URGENT - My local hospital's site is rated as DANGEROUS and also SAFE

Hi Taffy_078,
 
The main domain 'cht.nhs.uk' is rated as safe in safeweb.norton.com

https://safeweb.norton.com/report/show?url=cht.nhs.uk

We are currently partitioning 'cht.nhs.uk', so that each subdomain will have a separate rating and the main domain will have a separate rating.


Cops

Kudos0

Re: URGENT - My local hospital's site is rated as DANGEROUS and also SAFE

Thank you ever so much. Everyone here has been a real help - much appreciated.

I'll tell them about this and have also asked them to look into the 'offending' phishing attack the simsuite demo one listed in the report. The name suggests to me that that could be the place where they 'trial' proposed changes to their website. If it is then I've suggested that they need to look into why it's happened now and never before.  

Thanks. It's been a good morning so far. Last week's Windows Updates messed up my Brother printer but I've just downloaded Win10 drivers and they work. I should go and do tonight's Lottery now!

Win10 Home v1803 build 17134.345/HP envy/EDGE (rubbish)/IE11 (RIP)11.285.17134.0/ OFFICE 365 Home Personal/Norton Security

This thread is closed from further comment. Please visit the forum to start a new thread.