Note: Please do not post Personally Identifiable Information like email address, personal phone number, physical home address, product key etc.
Issue abstract:
Detailed description: When trying to access nityo dot com website I get a “Threat secured” message from Norton with Threat name = URL:Blacklist. I want to know if this is a legitimate threat, or is there a mistake?
Product & version number:
OS details:
What is the error message you are seeing?
Threat type: Miscellaneous - this is malicious software that could harm your data, computer, or network.
-------------------------------------------------------------------------------- https://www.abuseipdb.com/ https://www.nityo.com/
We resolved the domain nityo.com to IP address 77.237.240.45 77.237.240.45 was not found in our database
AI Overview
The message “This site works only in browsers with SNI support” indicates that the website relies on Server Name Indication (SNI) to present the correct SSL certificate during the TLS handshake. SNI is an extension to the TLS protocol that allows a server to host multiple secure websites on a single IP address, each with its own SSL certificate.
Explanation:
SNI’s Role:
When a client (like a web browser) connects to a server with a shared IP address, SNI allows the client to specify the hostname it’s trying to reach. This enables the server to deliver the correct SSL certificate for that specific domain, preventing “common name mismatch errors” where the certificate doesn’t match the requested website.
Without SNI:
If a browser or client does not support SNI, the server cannot determine which certificate to present. In such cases, it might offer a default certificate, which could lead to security warnings or a failure to establish a secure connection, as the certificate won’t match the requested domain.
Modern Browser Support:
Most modern web browsers and operating systems fully support SNI. Therefore, this message primarily affects users with very old browsers (e.g., Internet Explorer 6 on Windows XP) or outdated client software.
Implications:
For the vast majority of users, this message has no practical impact, as their browsers will handle SNI correctly. However, if a website aims to support extremely old clients, they might need to consider alternative configurations, such as using dedicated IP addresses for each domain or exploring options for legacy client support within their hosting or CDN provider.
