Join 3,572 readers in helping fund MetaFilter (Hide)


I can't believe I'm wasting an Ask on a computer problem
March 31, 2014 4:35 PM   Subscribe

Why am I getting an error for certain secure sites, only from my home router?

Starting yesterday, I believe, when I tried to access hotmail or Facebook my browser wouldn't let me. It gives a Norton ConnectSafe warning page, and says "Malicious website blocked!

www.hotmail.com

This website may be dangerous, and it is recommended that you do not continue. For your protection, this site has been blocked.

This detailed report explains the security risks on this site".

When I click on the detailed report, it says the site is safe. From what I can gather, certain secure sites are actually trying to access search.dnsadvantage.com. I tried on my work Mac and the same error happened, but only while I was on my home wifi. When I click, "i want to visit the site anyway", it doesn't let me and I then get an error from Chrome that says the same thing, and clues me into the search.dnsadvantage.com thing.

I do not have any toolbars installed. I've run a malware search and my Avast is up to date. I have googled for info, but all I can tell is that dnsadvantage is a recursive dns site and not a virus or something. I assume the problem has to do with my router, since the error only occurs at home, and the ConnectSafe warning also has the Belkin logo, which is the brand of my router.

I feel so dumb for not figuring this out, please hope me!
posted by masquesoporfavor to Computers & Internet (10 answers total)
 
Could it be your ISP? Perhaps they have installed something recently? What DNS ip's are you using (ipconfig, or ifconfig, depending on platform)?
posted by njk at 4:51 PM on March 31 [1 favorite]


My first thought is a misconfigured or compromised router. I'd do a factory reset on the router, change the passwords from the defaults, and then see if you have the same issue.
posted by Jairus at 4:57 PM on March 31 [1 favorite]


Okay first of all, I'm apparently way dumber about computers than I thought because I have no idea what DNS ip I'm using! I did press the reset button on the router earlier and it did not help, but I will do it again and change the password.

Also, because it wasn't clear above, my home computer is a PC but my work laptop is a Mac, and this problem is on both. My phone also can't access Facebook or hotmail when I'm on wifi but can on 3g, which further cements everyone's theories thus far. Thank you!
posted by masquesoporfavor at 5:12 PM on March 31


Woohoo! It appears to be working, thank you!!
posted by masquesoporfavor at 5:22 PM on March 31


If resetting your router and changing the password worked (when resetting it and not changing the password didn't work before), I would change all your other passwords online, and keep an eye on your bank balances for the next few months to make sure that any accounts you've done online banking with don't have any transactions you don't recognize. Better safe than sorry.
posted by Jairus at 5:24 PM on March 31 [2 favorites]


And check to see if there's any firmware updates for your router and get them applied ASAP.
posted by Candleman at 5:26 PM on March 31 [2 favorites]


It gives a Norton ConnectSafe warning page, and says "Malicious website blocked!

www.hotmail.com

This website may be dangerous, and it is recommended that you do not continue. For your protection, this site has been blocked.


Basically you've been redirected to a site that represents itself as hotmail, but is not hotmail. This is really bad, for obvious reasons. Run a malware scan on your pc (just use microsoft's), and update the firmware on your router.
posted by empath at 7:49 PM on March 31 [1 favorite]


Okay sorry if I'm not supposed to do this, but now our debit card has been hacked. Does this mean someone got onto our network and stole our bank info, or someone stole the bank info and then hacked our network? Or are they not related?! Now I'm creeped out!
posted by masquesoporfavor at 2:06 PM on April 3


When you go to a website that isn't what it says it is, and put in your password, then whoever is running the forged website has your password. Which means they can login in to your hotmail account and start resetting your passwords for every account you signed up for with hotmail.

So basically you need to change all the passwords for every site you've ever signed up for, starting with Hotmail.

People don't make viruses for giggles. They do it to steal from you.
posted by empath at 4:29 PM on April 3 [1 favorite]


Probably someone hacked your network and then hacked your bank. They used an exploit or ran the default passwords. Go to a friend's house and change all your passwords from there. And then buy a new router.
posted by Jairus at 3:17 PM on April 7


« Older Im in IT, paid a salary for 40...   |  Asking for a friend. Said frie... Newer »

You are not logged in, either login or create an account to post comments