Dear Sirs:
My customers receive "McAfee® Potentially Unsafe URLs Detected" from my mails.
I work for a company that seeks and elaborates information from Internet. We send them mails containing links to information in our servers.
They get this warning;
McAfee®
The total number of URLs identified : 75
Information: |
|
See your system administrator for further information.
The links are like these: http://v.subdomain.comain.com/?14610572250305081328
How can we prevent this from happening?
(I'll provide subdomain and domain in private message. I'd like prevent my company to be considered spammer. We send mail only to users that contracted our services)
Thanks.
Marc.
Solved! Go to Solution.
Hi Marc,
as i said, You are getting these errors because one of the URLs on Your mail leads to potentially unsafe web content.
To get further information You need to ask Your customer for an excerpt from the Email Gateways conversation log from the affected Mail.
This tells You in detail which URLs are rated with bad reputation.
Best Regards
Marcus
Hi Marc,
The Webserver that these links lead to are unsafe and rated with high risk on Web Content.
Probably it has been seen on the Internet when spreading Malware or Spam and this is why Your mails are blocked because of a bad Trusted Source Reputation.
Please see http://www.mcafee.com/threat-intelligence/ip/default.aspx?ip=141.8.225.124 (141.8.225.124 is the IP of the mentioned Webserver)
You may contact Intel Security by using Threat Feedback to remedy you problem after your Webserver is clean again.
If it is not your Webserver, you may contact the owner.
Otherwise Your Customers have to Whitelist Your Adress in order not to be checked on Email- and/or Web-Reputation.
Best Regards
Marcus
Great, looks like this works.
But
http://v.subdomain.comain.com/?14610572250305081328
is only an example
True address for that service is 83.169.91.131 and looks like it does not have bad reputation.
http://www.mcafee.com/threat-intelligence/ip/default.aspx?ip=83.169.91.131
So, why are we getting Potentially Unsafe URLs Detected errors?
Thanks.
Hi Marc,
as i said, You are getting these errors because one of the URLs on Your mail leads to potentially unsafe web content.
To get further information You need to ask Your customer for an excerpt from the Email Gateways conversation log from the affected Mail.
This tells You in detail which URLs are rated with bad reputation.
Best Regards
Marcus
OK, I could find the offending links:
http://www.blitzquotidiano.it/home.php?page=hp&sezione=media
http://www.gazzettadinapoli.it/notizie
I checked them here and found that they were classified as High Risk:
https://www.trustedsource.org/en/
Hopefully none of our Servers or services has been classified as risky, only these links that were part of a customer search.
Customer was pretending it was my company that was sending virus to them.
Thanks.
Corporate Headquarters
6220 America Center Drive
San Jose, CA 95002 USA