10 ms·

I was redirected to some loan company.

kome 5y ago
me too!
sodimel 5y ago
Me too. Here's the result of nmap -p 443 --script ssl-cert weighoff.net: Starting Nmap 7.80 ( https://nmap.org ) at 2022-03-31 17:24 CEST Nmap scan report for weighoff.net (213.175.208.197) Host is up (0.056s latency). rDNS record for 213.175.208.197: charlie.awebserver.co.uk PORT STATE SERVICE 443/tcp open https | ssl-cert: Subject: commonName=arrowloans.co.uk | Subject Alternative Name: DNS:arrowloans.co.uk, DNS:cpanel.arrowloans.co.uk, DNS:cpcalendars.arrowloans.co.uk, DNS:cpcontacts.arrowloans.co.uk, DNS:mail.arrowloans.co.uk, DNS:webdisk.arrowloans.co.uk, DNS:webmail.arrowloans.co.uk, DNS:www.arrowloans.co.uk | Issuer: commonName=cPanel, Inc. Certification Authority/organizationName=cPanel, Inc./stateOrProvinceName=TX/countryName=US | Public Key type: rsa | Public Key bits: 2048 | Signature Algorithm: sha256WithRSAEncryption | Not valid before: 2022-01-21T00:00:00 | Not valid after: 2022-04-21T23:59:59 | MD5: 087b d643 652c f167 689e 71fb 2acc ef07 |_SHA-1: d212 d954 f09d 7ff7 9068 6e90 4012 b592 cc2d c64f Nmap done: 1 IP address (1 host up) scanned in 0.58 seconds Edit: that's funny, http://weighoff.net/ http://weighoff.net/ (not https) shows the content of charlie.awebserver.co.uk :D
- goldcd 5y ago
  How odd - I'm now seeing https://www.webs.limited/ https://www.webs.limited/
- slowmovintarget 5y ago
  I got the Bad SSL Cert warning in Firefox and just backed out.
deleted 5y ago
[deleted]
last_one_in 5y ago
Aww man, really sorry. Not my doing. Trying to sort it out. My hosting account's been suspended. It's all gone a bit pear shaped. Oopsie.
- tomhallett 5y ago
  When you get some time to breathe, I would love to hear a "retrospective" about how an account suspension turned into a redirect to a loans website. Did a bad actor notice your account was suspended, took over it somehow and then they sent traffic to their website? Is this standard protocol for your hosting provider (similar to those domain landing pages which link to all sorts of weird crap)?
  - last_one_in 5y ago
    The sysadmin thought I was up to no good and suspended me, which seems pretty reasonable to me. He was really cool and not even pissed off that I wiped out a server. All got cleared up. The site is on a different server now.
    - tomhallett 5y ago
      figured that you got suspended, but it sounded like the url starting going to some other site vs just erroring out. right?
      - last_one_in 5y ago
        Yeah, because I got suspended the webserver decided to just serve the first site alphabetically. Nice behaviour. I scared the ** out of me, I thought it had been hacked.
last_one_in 5y ago
Yeah, really sorry about that. Wasn't my doing. The rather unexpected surge of traffic fried the server. Hopefully resolved now. I was never expecting to hit the front page of HN let alone number 1.

kome 5y ago

me too!

Me too. Here's the result of nmap -p 443 --script ssl-cert weighoff.net: Starting Nmap 7.80 ( https://nmap.org ) at 2022-03-31 17:24 CEST Nmap scan report for weighoff.net (213.175.208.197) Host is up (0.056s latency). rDNS record for 213.175.208.197: charlie.awebserver.co.uk PORT STATE SERVICE 443/tcp open https | ssl-cert: Subject: commonName=arrowloans.co.uk | Subject Alternative Name: DNS:arrowloans.co.uk, DNS:cpanel.arrowloans.co.uk, DNS:cpcalendars.arrowloans.co.uk, DNS:cpcontacts.arrowloans.co.uk, DNS:mail.arrowloans.co.uk, DNS:webdisk.arrowloans.co.uk, DNS:webmail.arrowloans.co.uk, DNS:www.arrowloans.co.uk | Issuer: commonName=cPanel, Inc. Certification Authority/organizationName=cPanel, Inc./stateOrProvinceName=TX/countryName=US | Public Key type: rsa | Public Key bits: 2048 | Signature Algorithm: sha256WithRSAEncryption | Not valid before: 2022-01-21T00:00:00 | Not valid after: 2022-04-21T23:59:59 | MD5: 087b d643 652c f167 689e 71fb 2acc ef07 |_SHA-1: d212 d954 f09d 7ff7 9068 6e90 4012 b592 cc2d c64f Nmap done: 1 IP address (1 host up) scanned in 0.58 seconds Edit: that's funny, http://weighoff.net/ http://weighoff.net/ (not https) shows the content of charlie.awebserver.co.uk :D

goldcd 5y ago
How odd - I'm now seeing https://www.webs.limited/ https://www.webs.limited/
slowmovintarget 5y ago
I got the Bad SSL Cert warning in Firefox and just backed out.

deleted 5y ago

[deleted]

last_one_in 5y ago

Aww man, really sorry. Not my doing. Trying to sort it out. My hosting account's been suspended. It's all gone a bit pear shaped. Oopsie.

tomhallett 5y ago
When you get some time to breathe, I would love to hear a "retrospective" about how an account suspension turned into a redirect to a loans website. Did a bad actor notice your account was suspended, took over it somehow and then they sent traffic to their website? Is this standard protocol for your hosting provider (similar to those domain landing pages which link to all sorts of weird crap)?
- last_one_in 5y ago
  The sysadmin thought I was up to no good and suspended me, which seems pretty reasonable to me. He was really cool and not even pissed off that I wiped out a server. All got cleared up. The site is on a different server now.
  - tomhallett 5y ago
    figured that you got suspended, but it sounded like the url starting going to some other site vs just erroring out. right?
    - last_one_in 5y ago
      Yeah, because I got suspended the webserver decided to just serve the first site alphabetically. Nice behaviour. I scared the ** out of me, I thought it had been hacked.

last_one_in 5y ago

Yeah, really sorry about that. Wasn't my doing. The rather unexpected surge of traffic fried the server. Hopefully resolved now. I was never expecting to hit the front page of HN let alone number 1.