Should I be worried

diy1950

I posted this in "savings & investments" but probably should have posted here.

I go to Newcastle Building Society website and the padlock displays in the address bar. However when I click on the login button the address bar says "https" but no padlock.

There is also an "i" within a circle. When I click on this I am told the site is not fully secure.

I tested the address on "why no padlock.com" and this is the result.

Test Information
Tested URL https://online.newcastle.co.uk/Authenticate/LogIn.aspx?ReturnUrl=%2fAuthenticate%2fDefault.asp x%3fwa%3dwsignin1.0%26wtrealm%3dhttps%253a%252f%25 2fonline.newcastle.co.uk%26wctx%3drm%253d0%2526id% 253dpassive%2526ru%253d%25252fOFIS%25252fLanding.a spx%26wct%3d2018-03-09T12%253a33%253a44Z%26wreply%3dhttps%253a%252f%25 2fonline.newcastle.co.uk%252fOFIS%252fLanding.aspx &wa=wsignin1.0&wtrealm=https%3a%2f%2fonline.newcas tle.co.uk&wctx=rm%3d0%26id%3dpassive%26ru%3d%252fO FIS%252fLanding.aspx&wct=2018-03-09T12%3a33%3a44Z&wreply=https%3a%2f%2fonline.newca stle.co.uk%2fOFIS%2fLanding.aspx
Test completed Fri, Mar 9, 2018 7:35 AM Eastern Time (GMT -5)
Results URL https://www.whynopadlock.com/results/421b5b07!!!8209;c600!!!8209;4710!!!8209;aa2d!!!820 9;1b1bb0def3de
SSL Connection - Pass
SSL Certificate Info
Certificate Issuer
GlobalSign nv-sa
Certificate Type
GlobalSign Extended Validation CA - SHA256 - G3
Issued On
2017-05-05
Force HTTPS Your webserver is forcing the use of SSL.
Valid Certificate Your SSL Certificate is installed correctly.
Domain Matching Your SSL certificate matches your domain name!
Protected Domains:
online.newcastle.co.uk
owa.online.newcastle.co.uk
mail.online.newcastle.co.uk
autodiscover.online.newcastle.co.uk
https://www.online.newcastle.co.uk
Signature Your SSL certificate is using a sha256 signature!
Expiration Date Your SSL certificate is current. Your SSL certificate expires in 496 days. (2019-07-18)
Mixed Content - Errors
Soft Failure A file with an insecure url of "http://www.newcastle.co.uk/page-not-found.html" was loaded on line: 181 of https://online.newcastle.co.uk/Authenticate/LogIn.aspx?ReturnUrl=%2fAuthenticate%2fDefault.asp x%3fwa%3dwsignin1.0%26wtrealm%3dhttps%253a%252f%25 2fonline.newcastle.co.uk%26wctx%3drm%253d0%2526id% 253dpassive%2526ru%253d%25252fOFIS%25252fLanding.a spx%26wct%3d2018-03-09T12%253a33%253a44Z%26wreply%3dhttps%253a%252f%25 2fonline.newcastle.co.uk%252fOFIS%252fLanding.aspx &wa=wsignin1.0&wtrealm=https%3a%2f%2fonline.newcas tle.co.uk&wctx=rm%3d0%26id%3dpassive%26ru%3d%252fO FIS%252fLanding.aspx&wct=2018-03-09T12%3a33%3a44Z&wreply=https%3a%2f%2fonline.newca stle.co.uk%2fOFIS%2fLanding.aspx.
This URL will need to be updated to use a secure URL for your padlock to return.

Should I be worried?
I was going to contact Newcastle but thought maybe I was missing something.

John_Gray

"Soft Failure A file with an insecure url of "http://www.newcastle.co.uk/page-not-found.html" was loaded on line: 181 of https://online.newcastle.co.uk/Authenticate/LogIn.aspx?......"
means that Newcastle hasn't got their website security quite right.

Let them know and they will deluge you with praise and gifts!
Allegedly...

forgotmyname

Not like the old days where you could phone the bank and get through to the tech team.

Had a good chat one night to a guy when i reported a load of fake banking sites. Someone had asked me to check a site and i tried other bank names and they were all queued up ready to attract the unwary.