Siteadvisor problem?

[bobobo10]

Okay I have McAfee's SiteAdvisor and when I try to log into the account I get redirected to the siteadvisor site at this link:
http://www.siteadvisor.com/phishing.html?domain=http://69.89.31.192:2082/login/&reason=blacklistref=safe&client_ver=FF_26.5_6256&locale=en-US&premium=false&client_type=FF&aff_id=0 (SiteAdvisorlink)
If you don't want to click on the link it says this
" 69.89.31.192:2082/login/ may try to steal your information.

Why were you redirected to this page? When we visited this site, we found it may be designed to trick you into submitting your financial or personal information to online scammers. This is a serious security threat which could lead to identity theft, financial losses or other dissemination of personal information. "

What the heck?

[Early Out]

False positive.

To expand a bit... McAfee is seeing a link that consists of an IP address, a port number, and a login subdirectory. This is exactly what a lot of phishing site addresses look like. McAfee isn't actually trying the link - it's just basing its warning on what the link looks like.

[felgall]

It's your site so the only person who has access there to steal your information is you.

[buffee]

Didn't know where to post this. As of tonight my Siteadvisor quit working. Its GRAY--doesn't work at all. I tried re downloading it--didn't help. I have firefox browser. any ideas. How do I unistall it, so I can do a clean reinstall? thanks.

[billseymour]

Hello-
I am a new bluehost account member (2 weeks). I have an ongoing contact with Mcafee, for the following problem:

Log-in to bluehost.com account produces a Yellow Phishing Warning from Mcafee. Choosing 'allow this site' does not work, and the warning blocks action again. After perhaps 4 'allow this site/OK' clicks, I sluggishly get to control panel. When I log out, I get the yellow warning again.

I am on a Dell XPS desktop, Vista, latest Mcafee.

Please note that the problem appears to be occurring here:
(in Mcafee Security Center:

Internet and Network > Configure > Phishing > Advanced; there is a box 'Enable blacklist and whitelist lookup'.

If this box is CHECKED, this whole yellow phishing alert occurs.
If box is UNCHECKED, I can log in/out without problem and without slowness.

I have already done one round with a 'level 2 tech' of Macafee, and will have another call me in a day or so. There is no problem with my system (Mcafee's own virtual tech is Green, the L2 tech saw no problem at all).

I would say that bluehost.com is on a Mcafee blacklist- I see this as a problem at Mcafee's end (too aggressive), but also suggest that any bluehost.com rep reading this contact Mcafee- if bluehost is on such a list, that is not good for business.

(I did call bluehost last week, and alerted a tech to this problem, btw).

OK- just wanted to get this post up. I can avoid these issues by unchecking the 'blacklist lookup', but my issue with Mcafee is that it is ridiculous to have to accept less security (from a security program!) due to a problem at their end.
-- Bill

[Early Out]

As I was moved to observe just a couple of days ago... click here (http://www.bluehostforum.com/showpost.php?p=53414&postcount=5). :)

[billseymour]

Early Out-

Sort of sad but true, isn't it? I find myself thinking about a few friends I once considered paranoid, who would not hook up their computer to the internet in any way, shape, or fashion. They do have a point, of sorts. The problem of balancing access against security is one issue. The threat of the virus-producers is another. And vendor 'marketing orientation' (ie, my product is the most secure security software ever... even if it means you can't go where you clearly wish to) is a third.

I'm sure that a resolution will eventually occur. (In the end, it might mean my turning off the Mcafee 'blacklist lookup') I am interested to see if additional bluehost customers are encountering similar issues.
--Bill

[felgall]

Any form of security needs to be a compromise between keeping your computer safe from attack and allowing you to easily use it to do what you want. The best form of security is to just pull the plug out of the wall and never plug it back in but you can't use your secure computer for much of anything if you do that. Security programs probably divide up into two groups (although they are not labelled as such.

Group one is for people who know very little about computer security. Those programs block access to anything that might be unsafe and hope that the person using the computer never has a reason to want to access anything that it is blocked because if they do then they are out of luck.

Group two is for people who know a bit about security and can use the settings within the program that the programs in group one don't have (or people would be disabling their security and then complaining that it failed to work) in order to specifically allow those accesses that they know for certain are safe but where most accesses of that type do need to be blocked.

McAfee and Nortons are definitely group one security programs for newbies to security who don't try to use their computer online for anything other than basic web browsing.

[billseymour]

Felgall-

I think your response misses the point of my posing the question. You focused on 'newbies vs experienced users'. I am focusing on 'customers'. If a potential customer/user of Bluehost is deterred because of a warning, whether or not they should be deterred and whether or not they are a 'newbie', the end result is lost business for Bluehost. I would think that a web host provider would want to have the user experience be as smooth and uneventful as possible. Every bump in the road (even if it a bump that you or another tech-savvy person feels is minor) is a potential lost piece of business.
--Bill

[Bob Barr]

I'm getting a green status on bluehost.com from SiteAdvisor. There are a couple of bogus reports that the site is a phishing site. (It would probably be good for someone at BlueHost to reply to MacAfee about that.)

Regardless, clicking on the arrow at the right end of the SiteAdvisor button opens a drop-down list. Included there you'll find an entry labeled "Do Not Warn list...". Clicking on that opens a new pane which allows you to add any site you'd like to the list.

[felgall]

Felgall-

I think your response misses the point of my posing the question. You focused on 'newbies vs experienced users'. I am focusing on 'customers'. If a potential customer/user of Bluehost is deterred because of a warning, whether or not they should be deterred and whether or not they are a 'newbie', the end result is lost business for Bluehost. I would think that a web host provider would want to have the user experience be as smooth and uneventful as possible. Every bump in the road (even if it a bump that you or another tech-savvy person feels is minor) is a potential lost piece of business.
--Bill


BlueHost isn't alone in being incorrectly blocked by McAfee and Nortons. The majority of the web are incorrectly blocked by that software. There are only a few popular sites that they don't try to block you from.

[Eriksrocks]

I was bugged by this problem ever since I signed up for Bluehost but was too lazy to bring it to attention. :p After some work, I managed to fix it.

The problem is that the instructions on the warning page that guide you through adding the problem URL to your "Do Not Warn List" don't work. :rolleyes:

The warning page says:


How to override this phishing warning for this site:

If you are absolutely sure that you still want to visit this site, here's how:


Click on the SiteAdvisor dropdown menu arrow (click on the black arrow on the right side of the SiteAdvisor safety button)

Note: if you're using SiteAdvisor Plus in 'Protected Mode', choose 'Disable Protected Mode' by clicking on SiteAdvisor's dropdown menu. Enter your Protected Mode password when prompted and then ...
Choose "Do not warn list..." from the menu.
Add "69.89.31.213:2082/login/" to the list.

Type "69.89.31.213:2082/login/" back into your Web browser.


(The IP address may be different depending on what Box you're on.)
When you follow those steps, revisit the page, it warns you again. And again.

The solution is instead of putting "69.89.31.213:2082/login/" into the Do Not Warn List, put just the IP Address, so in this case you would put "69.89.31.213".

I'm running SiteAdvisor (free version) version 26.5 Build 6265. I'm guessing that this should work for everyone. :)

[Eriksrocks]

You guys should sticky this. :)