Your browser isn't supported
It looks like you're using an old web browser. To get the most out of the site and to ensure guides display correctly, we suggest upgrading your browser now. Download the latest:

Welcome to the MSE Forums

We're home to a fantastic community of MoneySavers but anyone can post. Please exercise caution & report spam, illegal, offensive or libellous posts/messages: click "report" or email forumteam@. Skimlinks & other affiliated links are turned on

Search
  • FIRST POST
    • diy1950
    • By diy1950 9th Mar 18, 9:16 PM
    • 107Posts
    • 19Thanks
    diy1950
    Should I be worried
    • #1
    • 9th Mar 18, 9:16 PM
    Should I be worried 9th Mar 18 at 9:16 PM
    I posted this in "savings & investments" but probably should have posted here.

    I go to Newcastle Building Society website and the padlock displays in the address bar. However when I click on the login button the address bar says "https" but no padlock.

    There is also an "i" within a circle. When I click on this I am told the site is not fully secure.

    I tested the address on "why no padlock.com" and this is the result.

    Test Information
    Tested URL https://online.newcastle.co.uk/Authenticate/LogIn.aspx?ReturnUrl=%2fAuthenticate%2fDefault.asp x%3fwa%3dwsignin1.0%26wtrealm%3dhttps%253a%252f%25 2fonline.newcastle.co.uk%26wctx%3drm%253d0%2526id% 253dpassive%2526ru%253d%25252fOFIS%25252fLanding.a spx%26wct%3d2018-03-09T12%253a33%253a44Z%26wreply%3dhttps%253a%252f%25 2fonline.newcastle.co.uk%252fOFIS%252fLanding.aspx &wa=wsignin1.0&wtrealm=https%3a%2f%2fonline.new cas tle.co.uk&wctx=rm%3d0%26id%3dpassive%26ru%3d%252fO FIS%252fLanding.aspx&wct=2018-03-09T12%3a33%3a44Z&wreply=https%3a%2f%2fonline.newca stle.co.uk%2fOFIS%2fLanding.aspx
    Test completed Fri, Mar 9, 2018 7:35 AM Eastern Time (GMT -5)
    Results URL https://www.whynopadlock.com/results/421b5b07!!!8209;c600!!!8209;4710!!!8209;aa2d!!!820 9;1b1bb0def3de
    SSL Connection - Pass
    SSL Certificate Info
    Certificate Issuer
    GlobalSign nv-sa
    Certificate Type
    GlobalSign Extended Validation CA - SHA256 - G3
    Issued On
    2017-05-05
    Force HTTPS Your webserver is forcing the use of SSL.
    Valid Certificate Your SSL Certificate is installed correctly.
    Domain Matching Your SSL certificate matches your domain name!
    Protected Domains:
    online.newcastle.co.uk
    owa.online.newcastle.co.uk
    mail.online.newcastle.co.uk
    autodiscover.online.newcastle.co.uk
    www.online.newcastle.co.uk
    Signature Your SSL certificate is using a sha256 signature!
    Expiration Date Your SSL certificate is current. Your SSL certificate expires in 496 days. (2019-07-18)
    Mixed Content - Errors
    Soft Failure A file with an insecure url of "http://www.newcastle.co.uk/page-not-found.html" was loaded on line: 181 of https://online.newcastle.co.uk/Authenticate/LogIn.aspx?ReturnUrl=%2fAuthenticate%2fDefault.asp x%3fwa%3dwsignin1.0%26wtrealm%3dhttps%253a%252f%25 2fonline.newcastle.co.uk%26wctx%3drm%253d0%2526id% 253dpassive%2526ru%253d%25252fOFIS%25252fLanding.a spx%26wct%3d2018-03-09T12%253a33%253a44Z%26wreply%3dhttps%253a%252f%25 2fonline.newcastle.co.uk%252fOFIS%252fLanding.aspx &wa=wsignin1.0&wtrealm=https%3a%2f%2fonline.new cas tle.co.uk&wctx=rm%3d0%26id%3dpassive%26ru%3d%252fO FIS%252fLanding.aspx&wct=2018-03-09T12%3a33%3a44Z&wreply=https%3a%2f%2fonline.newca stle.co.uk%2fOFIS%2fLanding.aspx.
    This URL will need to be updated to use a secure URL for your padlock to return.

    Should I be worried?
    I was going to contact Newcastle but thought maybe I was missing something.
Page 1
    • John Gray
    • By John Gray 10th Mar 18, 9:04 AM
    • 5,189 Posts
    • 2,969 Thanks
    John Gray
    • #2
    • 10th Mar 18, 9:04 AM
    • #2
    • 10th Mar 18, 9:04 AM
    "Soft Failure A file with an insecure url of "http://www.newcastle.co.uk/page-not-found.html" was loaded on line: 181 of https://online.newcastle.co.uk/Authenticate/LogIn.aspx?......"
    means that Newcastle hasn't got their website security quite right.

    Let them know and they will deluge you with praise and gifts!
    Allegedly...
    • forgotmyname
    • By forgotmyname 11th Mar 18, 12:57 AM
    • 26,984 Posts
    • 10,872 Thanks
    forgotmyname
    • #3
    • 11th Mar 18, 12:57 AM
    • #3
    • 11th Mar 18, 12:57 AM
    Not like the old days where you could phone the bank and get through to the tech team.

    Had a good chat one night to a guy when i reported a load of fake banking sites. Someone had asked me to check a site and i tried other bank names and they were all queued up ready to attract the unwary.
    Punctuation, Spelling and Grammar will be used sparingly. Due to rising costs of inflation.

    My contribution to MSE. Other contributions will only be used if they cost me nothing.

    Due to me being a tight git.
Welcome to our new Forum!

Our aim is to save you money quickly and easily. We hope you like it!

Forum Team Contact us

Live Stats

1,101Posts Today

6,615Users online

Martin's Twitter