{"id":3835,"date":"2020-12-02T11:03:25","date_gmt":"2020-12-02T11:03:25","guid":{"rendered":"https:\/\/chemicloud.com\/kb\/?post_type=ht_kb&#038;p=3835"},"modified":"2022-04-05T08:40:08","modified_gmt":"2022-04-05T08:40:08","slug":"remove-mcafee-siteadvisor-blacklist-warnings","status":"publish","type":"ht_kb","link":"https:\/\/chemicloud.com\/kb\/article\/remove-mcafee-siteadvisor-blacklist-warnings\/","title":{"rendered":"How To Remove McAfee SiteAdvisor Blacklist Warnings"},"content":{"rendered":"<p>McAfee blacklists thousands of websites every day. For most website owners, the various warnings McAfee can show about your website and dealing with them can seem like a challenging task.<\/p>\n<p>This knowledgebase article will help you understand what the cautionary message indicates and how to resolve this security warning.<\/p>\n    \t\t<div class=\"hts-messages hts-messages--info  hts-messages--withtitle hts-messages--withicon \"   >\r\n    \t\t\t<span class=\"hts-messages__title\">Important Note:<\/span>    \t\t\t    \t\t\t\t<p>\r\n    \t\t\t\t\tThis article covers McAfee SiteAdvisor Blacklists, not the warnings displayed in Google Search Engine Result Pages (SERPs). Looking to remove <a href=\"https:\/\/chemicloud.com\/kb\/article\/remove-google-blacklist-warnings\/\" target=\"_blank\" rel=\"noopener noreferrer\">Google Blacklists<\/a> warnings?     \t\t\t\t<\/p>\r\n    \t\t\t    \t\t\t\r\n    \t\t<\/div><!-- \/.ht-shortcodes-messages -->\r\n    \t\t\n<h2 id=\"common-signs-your-site-may-be-blacklisted-by-mcafee-siteadvisor\">Common Signs Your Site May Be Blacklisted by McAfee SiteAdvisor<\/h2>\n<p>Some big signs your site may be infected with something include:<\/p>\n<ul>\n<li>The McAfee WebAdvisor presents an error saying the site is risky or is insecure.<\/li>\n<li>You see a lot of spam links and redirects in your Google Search Console.<\/li>\n<li>Website files and images seem to have changed and you haven&#8217;t made the changes.<\/li>\n<li>Your web host has notified you of malware infecting your website.<\/li>\n<li>Your anti-virus or anti-malware software prevents you from visiting the site in your browser.<\/li>\n<\/ul>\n<h2 id=\"what-do-these-mcafee-siteadvisor-blocks-look-like-when-they-happen\">What Do These McAfee SiteAdvisor &#8220;Blocks&#8221; Look Like When They Happen?<\/h2>\n<p>Typically when McAfee has blacklisted a site and you try to access it using Chrome, or another browser using a computer protected by McAfee, you&#8217;ll see a screen that looks similar to the one below:<\/p>\n<div class=\"mceTemp\"><\/div>\n<div class=\"mceTemp\"><\/div>\n<figure id=\"attachment_3838\" aria-describedby=\"caption-attachment-3838\" style=\"width: 783px\" class=\"wp-caption aligncenter\"><img loading=\"lazy\" decoding=\"async\" class=\"wp-image-3838\" src=\"https:\/\/chemicloud.com\/kb\/wp-content\/uploads\/2020\/12\/mcafeewarning.png\" alt=\"McAfee WebAdvisor Warning Showing A Potentially Dangerous Site\" width=\"783\" height=\"448\" srcset=\"https:\/\/chemicloud.com\/kb\/wp-content\/uploads\/2020\/12\/mcafeewarning.png 948w, https:\/\/chemicloud.com\/kb\/wp-content\/uploads\/2020\/12\/mcafeewarning-300x172.png 300w, https:\/\/chemicloud.com\/kb\/wp-content\/uploads\/2020\/12\/mcafeewarning-768x440.png 768w, https:\/\/chemicloud.com\/kb\/wp-content\/uploads\/2020\/12\/mcafeewarning-50x29.png 50w, https:\/\/chemicloud.com\/kb\/wp-content\/uploads\/2020\/12\/mcafeewarning-60x34.png 60w, https:\/\/chemicloud.com\/kb\/wp-content\/uploads\/2020\/12\/mcafeewarning-100x57.png 100w\" sizes=\"auto, (max-width: 783px) 100vw, 783px\" \/><figcaption id=\"caption-attachment-3838\" class=\"wp-caption-text\">McAfee WebAdvisor Warning Showing A Potentially Dangerous Site<\/figcaption><\/figure>\n<h4 id=\"what-does-this-mean-how-can-i-resolve-it\">What Does This Mean &amp; How Can I Resolve It?<\/h4>\n<p>This error indicates McAfee has placed the website you&#8217;re trying to access on their blacklist. More than likely, the site is infected with malware.<\/p>\n<p>You may have the option to continue to the website, or depending on McAfee&#8217;s perceived severity of the problem with the website, you may not be able to access it at all without whitelisting it in your McAfee WebAdvisor Control Panel.<\/p>\n<h3 id=\"other-examples-of-mcafee-siteadvisor-blacklist-warning-messages\">Other Examples Of McAfee SiteAdvisor Blacklist Warning Messages<\/h3>\n<p>The major browsers, Chrome and Firefox, use the Google Safe Browsing API to help people steer clear of websites they suspect to be infected or compromised. Other browsers, however, may not display the warnings in the same way as Chrome or Firefox, and they may not be using the Google Safe Browsing API. Here are some examples of the various ways other browsers may warn you about a potentially compromised website:<\/p>\n<ul>\n<li>This website may harm your computer.<\/li>\n<li>This site may be hacked.<\/li>\n<li>Deceptive site ahead.<\/li>\n<li>This website has been reported as unsafe.<\/li>\n<li>The site you are trying to access contains malware or harmful programs.<\/li>\n<li>Phishing attack or site detected.<\/li>\n<li>The page you are trying to access is attempting to load scripts from unauthenticated or unsecure sources.<\/li>\n<li>Warning: Potential Security Risk Ahead.<\/li>\n<\/ul>\n<h2 id=\"how-to-resolve-mcafee-webadvisor-warnings\">How To Resolve McAfee WebAdvisor Warnings<\/h2>\n<p>Websites lose 95% of their traffic (if not more) when a service like Google or McAfee WebAdvisor blacklists a site. They (McAfee) aren&#8217;t out to get you personally, it&#8217;s just that McAfee has a duty to protect users of it&#8217;s software from potentially dangerous websites.<\/p>\n<h3 id=\"checking-the-safe-browsing-status-of-any-website\">Checking The Safe Browsing Status Of Any Website<\/h3>\n<p>McAfee has a method to check the Safe Browsing status of any website <a href=\"https:\/\/www.trustedsource.org\/?p=mcafee\" target=\"_blank\" rel=\"noopener noreferrer nofollow\">here<\/a>. You should be aware of this tool as it&#8217;s pretty helpful in checking on sites you maintain periodically, rather than being informed by the users after it happens.<\/p>\n<h3 id=\"get-google-search-console\">Get Google Search Console<\/h3>\n<p><a href=\"https:\/\/developers.google.com\/search#?modal_active=none\" target=\"_blank\" rel=\"noopener noreferrer nofollow\">Google Search Console<\/a>, formerly known as Google Webmaster Tools, is an absolute must when it comes to managing how Google interacts and indexes content on your website. Google Search Console is the first step in getting Google&#8217;s attention, i.e. getting your business or website in their search results, and on other Google platforms, such as Maps.<\/p>\n<p>If your site is blacklisted, you&#8217;ll need to use the Google Search Console to inform Google you&#8217;ve taken the appropriate steps to remove whatever &#8220;infection&#8221; or &#8220;compromise&#8221; your site had and are ready for them to review your site for removal from their blacklist.<\/p>\n<p>To remove the blacklist warning, you need to let Google know that you have completely cleared the infection. To do this, you must have a Google Search Console account (formerly Webmaster Tools).<\/p>\n<p>To verify ownership of your website in Google Search Console:<\/p>\n<ul>\n<li>Open <a href=\"https:\/\/developers.google.com\/search\" target=\"_blank\" rel=\"noopener noreferrer nofollow\">Google Search Console<\/a>.<\/li>\n<li><strong>Click Search Console<\/strong> and <strong>sign in<\/strong> with your Google account.<\/li>\n<li><strong>Click add a site<\/strong> and <strong>enter your website&#8217;s URL<\/strong>, then <strong>click continue<\/strong>.<\/li>\n<li><strong>Verify your site<\/strong> using their recommended method or alternate methods options.<\/li>\n<li>Click <strong>add a site<\/strong>, then <strong>verify<\/strong>.<\/li>\n<li>Review the <strong>Security &amp; Manual Actions<\/strong> section to review any warnings, and resolve as necessary.<\/li>\n<li>If you have warnings to resolve, you will be given steps to resolve them and notify Google you have fixed the problem and are requesting a review of your website for removal from their blacklist.<\/li>\n<\/ul>\n<p>You should determine what exactly is blacklisted by Google. On the Google Search Console page for your website, click on Security Issues and you will find the URLs that are being detected. If the URL is a directory, <em><strong>each folder and page below it must be checked for malware<\/strong><\/em>.<\/p>\n<h3 id=\"scan-your-website\">Scan Your Website<\/h3>\n<p>There are numerous\u00a0<strong>free<\/strong> tools online you can use to scan your site and identify the malware or &#8220;infection&#8221; causing McAfee to flag the site. Two of the best are listed below:<\/p>\n<p class=\"mb-30\">To scan your website for hacks and blacklist warnings using Sucuri SiteCheck:<\/p>\n<ul class=\"list-styled pl-20 mb-30\">\n<li class=\"list-styled-item\">Visit the Sucuri\u00a0<a href=\"https:\/\/sitecheck.sucuri.net\/\" target=\"_blank\" rel=\"noopener noreferrer nofollow\">SiteCheck<\/a>\u00a0website and enter your website URL.<\/li>\n<li class=\"list-styled-item\">Click\u00a0<b>Scan Website<\/b>.<\/li>\n<li class=\"list-styled-item\">If the site is infected, note any payloads and file locations found by SiteCheck.<\/li>\n<li class=\"list-styled-item\">Click\u00a0<b>Blacklist Status<\/b>\u00a0to see if you\u2019ve been blacklisted by other authorities besides McAfee SiteAdvisor.<\/li>\n<\/ul>\n<p>If SiteCheck is able to find something wrong with the website, this can help narrow your search. you can also use other tools such as <a href=\"http:\/\/www.unmaskparasites.com\/?_ga=2.252458701.579538594.1506616476-1672669225.1468248676\" target=\"_blank\" rel=\"noopener noreferrer nofollow\">UnmaskParasites<\/a>.<\/p>\n<p>For Content Management Systems, such as WordPress or Joomla, you can safely rebuild the site using new copies of your core files and extensions directly from the official repositories. Custom files can be replaced with a recent backup\u2014as long as it\u2019s not infected.<\/p>\n<h2 id=\"how-to-remove-google-blacklist-warnings\"><span id=\"how-to-request-a-removal-from-mcafee-siteadvisor-blacklist\">How to Request a Removal from McAfee SiteAdvisor Blacklist<\/span><\/h2>\n<figure id=\"attachment_3839\" aria-describedby=\"caption-attachment-3839\" style=\"width: 783px\" class=\"wp-caption aligncenter\"><img loading=\"lazy\" decoding=\"async\" class=\"wp-image-3839\" src=\"https:\/\/chemicloud.com\/kb\/wp-content\/uploads\/2020\/12\/mcafeescan.png\" alt=\"McAfee Customer Ticketing System\" width=\"783\" height=\"454\" srcset=\"https:\/\/chemicloud.com\/kb\/wp-content\/uploads\/2020\/12\/mcafeescan.png 1645w, https:\/\/chemicloud.com\/kb\/wp-content\/uploads\/2020\/12\/mcafeescan-300x174.png 300w, https:\/\/chemicloud.com\/kb\/wp-content\/uploads\/2020\/12\/mcafeescan-1024x594.png 1024w, https:\/\/chemicloud.com\/kb\/wp-content\/uploads\/2020\/12\/mcafeescan-768x445.png 768w, https:\/\/chemicloud.com\/kb\/wp-content\/uploads\/2020\/12\/mcafeescan-50x29.png 50w, https:\/\/chemicloud.com\/kb\/wp-content\/uploads\/2020\/12\/mcafeescan-1536x891.png 1536w, https:\/\/chemicloud.com\/kb\/wp-content\/uploads\/2020\/12\/mcafeescan-60x35.png 60w, https:\/\/chemicloud.com\/kb\/wp-content\/uploads\/2020\/12\/mcafeescan-100x58.png 100w\" sizes=\"auto, (max-width: 783px) 100vw, 783px\" \/><figcaption id=\"caption-attachment-3839\" class=\"wp-caption-text\">McAfee Customer Ticketing System<\/figcaption><\/figure>\n<p class=\"mb-30\">To request a review of your site on McAfee to remove the blacklist:<\/p>\n<p class=\"p1\"><b>Struggling with malware issues? ChemiCloud is the hosting solution designed with reliability and security in mind! \ud83d\udd10 Check out our <\/b><span style=\"text-decoration: underline;\"><a href=\"https:\/\/chemicloud.com\/pricing#60b65e4e63b58\" target=\"_blank\" rel=\"noopener\"><span class=\"s1\"><b>web hosting <\/b><\/span><\/a><\/span><b>plans!<\/b><\/p>\n<ul class=\"list-styled pl-20 mb-30\">\n<li class=\"list-styled-item\">Visit the\u00a0<a href=\"https:\/\/www.trustedsource.org\/?p=mcafee\" target=\"_blank\" rel=\"noopener noreferrer nofollow\">ticketing service for McAfee SiteAdvisor<\/a>.<\/li>\n<li class=\"list-styled-item\">Choose\u00a0<b>McAfee SiteAdvisor\/WebControl (Enterprise)<\/b>\u00a0from the list.<\/li>\n<li class=\"list-styled-item\">Type in your URL and click\u00a0<b>Check URL<\/b>.<\/li>\n<li class=\"list-styled-item\">Review the\u00a0<b>Reputation<\/b>\u00a0and\u00a0<b>Categorization<\/b>\u00a0for your site.<\/li>\n<li class=\"list-styled-item\">Click\u00a0<b>Submit URL<\/b>\u00a0for Review.<\/li>\n<\/ul>\n    \t\t<div class=\"hts-messages hts-messages--alert   hts-messages--withicon \"   >\r\n    \t\t\t    \t\t\t    \t\t\t\t<p>\r\n    \t\t\t\t\tIt may take then 2-3 business days to get back to you and confirm they have removed your site from their blacklist.    \t\t\t\t<\/p>\r\n    \t\t\t    \t\t\t\r\n    \t\t<\/div><!-- \/.ht-shortcodes-messages -->\r\n    \t\t\n<h2 id=\"determine-when-and-why-this-happened\">Determine When And Why This Happened<\/h2>\n<p>Common causes of infected \/ compromised websites which are blacklisted include:<\/p>\n<ul>\n<li>Outdated Plugins<\/li>\n<li>Outdated App Installation, i.e. you are running an old version of Drupal, Joomla, or WordPress.<\/li>\n<li>Not using CAPTCHAS on areas where there is user input, such as form fields, login fields, comment &amp; review fields.<\/li>\n<li>You can ask your Web Host to restore your website to a date prior to this date. Following the restore, you would want to login to your website&#8217;s admin area and immediately update your app and\/or plugins to the latest versions to prevent the hack from taking place again, if it was caused by an outdated website app, like WordPress or Drupal version, or an outdated plugin.<\/li>\n<\/ul>\n<h2 id=\"preventing-this-from-happening-again\">Preventing This From Happening Again<\/h2>\n<p>Preventing your website from being hacked or compromised isn&#8217;t a task that requires your attention 100% of the day\/night. However, you should definitely be mindful of some basics when it comes to website security:<\/p>\n<p><strong>Invest in Rock-solid Web Hosting<\/strong><\/p>\n<p>Every web host out there should take security very seriously. The reason why it is essential that you choose a web host you can rely on for your business.<\/p>\n<p>Here at ChemiCloud, we use CloudLinux on our servers, which allows us to use a virtualized file system for each account and completely isolating it. A significant advantage of it is that if one user account becomes compromised, the malware infection does not spread to the other accounts hosted on the same server. What\u2019s more, we\u2019ve partnered with Imunify360 to provide with a secure and reliable <a href=\"https:\/\/chemicloud.com\/web-hosting\/\" target=\"_blank\" rel=\"noopener noreferrer\">web hosting<\/a> platform. It\u2019s multi-layered defense architecture ensures precision targeting and eradication of malware and viruses.<\/p>\n<p>This way we are adding an extra layer of protection compared to our competitors.<\/p>\n<p id=\"perform-regular-backups\"><strong>Perform regular backups<\/strong><\/p>\n<p>Make backups. Backing up your site is about creating a copy of all the site\u2019s data, and storing it somewhere safe. That way, you can restore the site from that backup copy in case anything bad happens.<\/p>\n<p>Most hosting providers now provide backups. ChemiCloud&#8217;s <a href=\"https:\/\/chemicloud.com\/web-hosting\/\" target=\"_blank\" rel=\"noopener noreferrer\">web hosting<\/a> plans have <strong>free automated backups<\/strong>, that are stored offsite, allowing to be quickly restored so that you can rest easy knowing your data is safe!<\/p>\n<p><strong>Always keep your web application version and plugins up to date<\/strong><\/p>\n<p>Keep plugins and integrations you have enabled on your website updated. If you use any specific plugins that are developed by 3rd parties or small developers, it might be wise to follow their social media and note if they post anything about an update being pushed out for the plugin\/app.<\/p>\n<p>If you are using WordPress, <a href=\"https:\/\/chemicloud.com\/kb\/article\/wordpress-auto-updates\/\" target=\"_blank\" rel=\"noopener noreferrer\">enable auto-updates<\/a> for your plugins and themes. This is a super helpful feature that was recently released in WordPress that will save you a lot of time.<\/p>\n<p><strong>Use CAPTCHAs<\/strong><\/p>\n<p>We recently published a blog on what CAPTCHAS are, why they are important, and how to setup <a href=\"https:\/\/chemicloud.com\/blog\/wordpress-captcha\/\" target=\"_blank\" rel=\"noopener noreferrer\">WordPress CAPTCHA<\/a>. CAPTCHAS keep robots from sending code with nefarious purposes through your contact forms, review forms, login \/ password reset forms, and comment fields.<\/p>\n<p><strong>Use Smart Usernames and Strong Passwords<\/strong><\/p>\n<p>Be wise when it comes to your username and password for your administration dashboard. Avoid using a username as \u201cadmin\u201d and always choose a complex password. Don\u2019t use \u201cadmin\u201d as your username but instead use a unique username for the administrator that is not related to your domain name.<\/p>\n<p>Make sure to choose a complex password. Alternatively, you can use an online tool like <a href=\"https:\/\/1password.com\/password-generator\/\" target=\"_blank\" rel=\"noopener noreferrer nofollow\">1Password Password Generator<\/a>.<br \/>\nIf you are managing multiple sites, it is prudent to use different passwords. The best way is to use an online password manager such as 1 Password, which offers a free subscription.<\/p>\n<p><strong>Disable directory listing<\/strong><\/p>\n<p>By default, when your web server does not find an index file (index.php or index.html), it automatically displays an index page showing the files and folders in that web directory.<\/p>\n<p>This could make your site vulnerable to attacks by revealing the critical information needed by hackers to take advantage of a vulnerability in a WordPress plugin, theme, or your server in general.<\/p>\n<p>Just add the following line in the site\u2019s .htaccess file located in the root directory of your website.<\/p>\n<pre>Options -Indexes<\/pre>\n<p>If you are a ChemiCloud customer, we have you covered. By default, the directory listing is disabled on our servers.<\/p>\n<p><strong>Use HTTPS for Encrypted Connections (SSL Certificate)<\/strong><\/p>\n<p>One of the most neglected ways to harden your WordPress website is to install an SSL certificate and run your site\u2019s URL\u2019s over HTTPS.<\/p>\n<p>Many <a href=\"https:\/\/chemicloud.com\/web-hosting\/\" target=\"_blank\" rel=\"noopener noreferrer\">Web Hosting<\/a> providers, including ChemiCloud, offer free SSL certificates with Let\u2019s Encrypt.<\/p>\n<h2 id=\"summary\">Summary<\/h2>\n<p>The security and integrity of your website should be your top concern as a website administrator. If you are running an online store, having your website blacklisted will scare off existing and new customers alike and cause your website to fall to the bottom of Google Search Engine Result Pages, or *gasp* to page 2 of the results.<\/p>\n<p>By taking simple steps to keep your website up to date and secure, such as updating plugins, using secure passwords, and making good use of CAPTCHAs, you can ensure your website won&#8217;t end up on a Google Blacklist. But, if it does, this article will help you get off that list and get back on track!<\/p>\n<p>If you know any other security tips that may help, please feel free to let us know in the comments area.<\/p>\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>McAfee blacklists thousands of websites every day. For most website owners, the various warnings McAfee can show about your website and dealing with them can seem like a challenging task. This knowledgebase article will help you understand what the cautionary message indicates and how to resolve this security warning. Common&#8230;<\/p>\n","protected":false},"author":10,"featured_media":3838,"comment_status":"open","ping_status":"closed","template":"","format":"standard","meta":{"_crdt_document":"","footnotes":""},"ht-kb-category":[192],"ht-kb-tag":[],"class_list":["post-3835","ht_kb","type-ht_kb","status-publish","format-standard","has-post-thumbnail","hentry","ht_kb_category-website-security"],"_links":{"self":[{"href":"https:\/\/chemicloud.com\/kb\/wp-json\/wp\/v2\/ht-kb\/3835","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/chemicloud.com\/kb\/wp-json\/wp\/v2\/ht-kb"}],"about":[{"href":"https:\/\/chemicloud.com\/kb\/wp-json\/wp\/v2\/types\/ht_kb"}],"author":[{"embeddable":true,"href":"https:\/\/chemicloud.com\/kb\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/chemicloud.com\/kb\/wp-json\/wp\/v2\/comments?post=3835"}],"version-history":[{"count":7,"href":"https:\/\/chemicloud.com\/kb\/wp-json\/wp\/v2\/ht-kb\/3835\/revisions"}],"predecessor-version":[{"id":7329,"href":"https:\/\/chemicloud.com\/kb\/wp-json\/wp\/v2\/ht-kb\/3835\/revisions\/7329"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/chemicloud.com\/kb\/wp-json\/wp\/v2\/media\/3838"}],"wp:attachment":[{"href":"https:\/\/chemicloud.com\/kb\/wp-json\/wp\/v2\/media?parent=3835"}],"wp:term":[{"taxonomy":"ht_kb_category","embeddable":true,"href":"https:\/\/chemicloud.com\/kb\/wp-json\/wp\/v2\/ht-kb-category?post=3835"},{"taxonomy":"ht_kb_tag","embeddable":true,"href":"https:\/\/chemicloud.com\/kb\/wp-json\/wp\/v2\/ht-kb-tag?post=3835"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}