IndexU themes and Microsoft phishing filter warnings

[Bruceper]

Yes I blew it. I deleted a post and a whole thread at once. Fortunately I still had the old thread in cache, here it is in it's textual glory



kleinhev
Registered User Join Date: Oct 2007
Posts: 1


IndexU themes and Microsoft phishing filter warnings
For every theme except the standard "kosmos" I get Microsofts' phishing filter alarms for virtually every PHP page. Microsoft repeatedly removed the designation for those PHP pages ... without success. The problem must be within the files of the themes.

Find out by yourself at http://www.linkpartnergold.com. The only template that works here w/o phishing filter warnings is Kosmos, all other templates fail. Try http://www.linkpartnergold.com/power_search.php for the themes: bluesmooth, blackjuice, portaldex, worlddex, (surprisingly no problem with: cleandex).

#2
Today, 03:55 AM
inspireme
Registered User Join Date: Nov 2004
Posts: 1,408




the frame at the top to switch themes is from another domain which is probably causing it to go off.


#3
Today, 04:51 AM
griller111
Registered User Join Date: Mar 2007
Posts: 23



I bought a template for one of my sites and I have the same problem, but I don't get it with my other site and thats a bought template as well. I have reported that the site is ok to microsofts phishing filter page online, but am worried as to why it happens and the impact on customers.

#4
Today, 07:48 AM
inspireme
Registered User Join Date: Nov 2004
Posts: 1,408




#5
Today, 08:12 AM
griller111
Registered User Join Date: Mar 2007
Posts: 23



It only goes off when you go to add a listing and bring up the add listing page with the form on it on my site.

Go to http://www.indexuthemes.com/demo/index.html

try the webbie demo and this reports ok
try the litaka demo and it reports a problem
simpla reports a problem while storm dosen't
they are all are on the same site, and it can't be anything to do with the theme chooser as some are ok some not?

#6
Today, 01:07 PM
Bruceper
Registered User Join Date: Jul 2005
Location: Winnipeg Canada
Posts: 754



We need to face it, IE7 sucks badly. This phishing crap is the worst idea in the world because it is forcing perfectly good designers to make bad decisions about their sites.

Make them properly or make them they way Microsoft wants them to be. Use Opera or Firefox and you won't see any of these issues and you'll be happier. Both browsers offer way more features than IE has ever thought of. Back in 1995 Opera had features that IE just added last year, talk about behind the times.

As for this phishing error, one possible reason is the RSS feeds, of course for the demo the frames are another issue.

Lastly, as for indexuthemes and linkpartnergold the "chooser" messes things up in Opera when you choose a different template. That tells me that something somewhere is broken badly and this another reason why you may see that phishing error.

#7
Today, 02:22 PM
inspireme
Registered User Join Date: Nov 2004
Posts: 1,408




from what i have read its a website thats trusted not individual pages so why it should go off when only using certain themes seems very strange.

[Bruceper]

Lets go a bit further into this

What kind of warning do you get? Since I don't use IE7 I need input.

Is this a red or yellow flag?

For IndexUThemes.com the issue is probably because there is no reverse DNS entry
For LinkPartnerGold.com the issue is probably because there is no reverse DNS entry


https://phishingfilter.microsoft.com/faq.aspx

Q. If I am a Web site owner, what can I do to help minimize the chance of my Web site being flagged by Phishing Filter?
A. There are several things you can do that can help minimize the chance of your site being flagged as suspicious. Think of these as best practices or optimal Web site design ethics.

Use secure sockets layer (SSL) certification with a current server certificate issued by a trusted certification authority if you ask users for personal information.

Make sure that your Web page doesn't expose any cross-site scripting (XSS) vulnerabilities. Protect your site by using anti-cross-site scripting attack tools

Use the fully-qualified domain name. All domains should reverse to actual domain names, not numeric IP addresses. This means a URL should look like “microsoft.com” and not “207.46.19.30.”

Avoid using the @ symbol before the fully-qualified domain name in your URL. The @ symbol enables phishers to concoct deceptive URLs and is therefore immediately suspicious to Phishing Filter.

Don't encode or tunnel your URLs unnecessarily. If you don't know what this means, you probably aren't doing it.

If you post external or third-party hosted content, make sure that the content is secure and from a known and trusted source.

And now for your other post

Hi,

For every theme except the standard "kosmos" I get Microsofts' phishing filter alarms for virtually every PHP page. Microsoft repeatetly removed the designation for those PHP pages ... without success. The problem must be within the files of the themes. The worst thing is that I payed 49 $ for the additional theme "neutral wood" which cannot be used either due to the same problems. This requires an URGENT solution!!!

Yes it does require an urgent solution. But since you neglected to supply a URL no one can help you.

If reverse DNS is the issue then simply add it. It's not that hard really. Of course we can't really know if that's the issue unless you add the reverse DNS entry and try again

Until you provide more information about your own site I've deleted your post in the announcement are because at this point it's nothing more than yelling wolf.


update---
both of the above sites DO have reverse DNS enabled, so in this case that's not the issue

[dody]

I think this is out of our control. So many indexu users use the same templates with a little modification. Furthermore, as i googled, i found that ms collect the list of phishing websites, not sure how is their algorithm to check phishing websites, or it just collect the IE users input.

[kleinhev]

Sorry Bruceper,

You want me to keep my site running as is? IE7 will certainly become the most important browser (for my site currently 32.8%), so how can such issues not be addressed? I have received a refund for the troublesome template and in turn purchased and applied the "cleaner" template which works fine!

Reverse DNS has always been there, too.

Lets go a bit further into this

What kind of warning do you get? Since I don't use IE7 I need input.

Is this a red or yellow flag?

For IndexUThemes.com the issue is probably because there is no reverse DNS entry
For LinkPartnerGold.com the issue is probably because there is no reverse DNS entry


https://phishingfilter.microsoft.com/faq.aspx



And now for your other post



Yes it does require an urgent solution. But since you neglected to supply a URL no one can help you.

If reverse DNS is the issue then simply add it. It's not that hard really. Of course we can't really know if that's the issue unless you add the reverse DNS entry and try again

Until you provide more information about your own site I've deleted your post in the announcement are because at this point it's nothing more than yelling wolf.


update---
both of the above sites DO have reverse DNS enabled, so in this case that's not the issue