Redirected Link

[Little BabyDoll Christine]

This convo, for some strange reason, took place in my Status Update. It appears to be a technical problem

https://www.dailydiapers.com/board/index.php?/profile/27920-little-babydoll-christine/&status=38647&type=status

[DailyDi]

My security is flagging it too. That's not an error on our end.

[Little BabyDoll Christine]

I'm using Widnws 11,  MalwareBytes Premium, Firefox Quantum with MalwareBytes Integration  and HTTPSEVERTHING. What I put in as a link is taken right from my address bar. My DNS is Register my webhost is Exmasters. How long has this been going on? I just did an automatic Re-up with my DNS

CAn someone leave a link to that site here so I can look at it. None of us are geeks here and this looks like a job for one

[DailyDi]

It's a link to hardcore porn thumbs. You should have warned us about that, some of us don't want to see that crap!

And for the record: It's a certificate error on one of the thumbs.

[Little BabyDoll Christine]

I would like a link to that so I can see it for myself. I am not seeing it AT ALL

It would be nice to know the OS, cybersecurity, and browser being used. For example, what if it is Win 10 (I use 11), Cybersecurity; BitDefender Free (I use MalwareBytes Premium) and browser is Chrome w/unknown addons (I use FireFox Quantum with the relevant add-ons  MalwareBytes Integration and HTTPSEVERYTHING)?

What can I do about the certificate of a thumbnail on a separate site that I cannot even access? What if that site left some crap on DD that affects links put here?

[DailyDi]

it's a basic certificate error, flagged by Firefox and IE without any add-ons. Nothing you can do except force the non-secure version of the page... or avoid risky traffic-thirst exchanges in general.

Not a DD issue at all.

[Little BabyDoll Christine]

I don't know who this is on. We're both using FireFox, and a person is entitled to use such security as they see fit. I will try an experiment. I will put one link here with HTTPS EVERYTHING in and one with it dosabled  it. So wait a half-hour or so before using any of the links in this post. Also, my browser is opening the page in a new tab

http://sandralyn.net/fastnav2.html

The "s" is missing thought HTTPS EVERYTHING is in

 

HTTPS EVERTHING  is now disabled

http://sandralyn.net/fastnav2.html

EDITED some hours later: I have tried both links, Refreshi'ing each time and I get just what the link says

[Little BabyDoll Christine]

Images

with HTTPS EVERTHING out

 

With it in

This time, I will add the "s" to the address

I does not bring up the image

[tuffy]

You can't load http://sandralyn.net/fastnav2.html with https because the server it runs on has been told to use a cert for www.hardcorenenas.com instead. Since the "common name" on the cert doesn't match sandralyn.net the browser will warn you that the cert doesn't match the URL. If you just go to http://sandralyn.net/ you'll get hardcorenenas.com pages instead.

Checking the IP addresses:

$ host sandralyn.net
sandralyn.net has address 89.185.228.63
$ host hardcorenenas.com                
hardcorenenas.com has address 89.185.228.63

tells me the we're dealing with the same virtual web server.

So, either your account on the virtual server itself has been hacked to insert a bogus cert and content OR the administrator for the server screwed something up and got your account mixed up with hardcorenenas.com instead.

Either way, you should contact your hosting provider for help.

[willnotwill]

Or they wanted to register both domains with the same certificate (which can be done, but they didn't).

 

[tuffy]

Yes, just last week I setup 7 hosts on the same let's encrypt cert for IIS. Not a pleasant experience, but finally got it working. 

[Little BabyDoll Christine]

Thanks. Now at lteast we are getting somewhere. Could this also be at my DNS because I just re-upped with them?

This does not happen when I open the link

[~Brian~]

On 4/18/2024 at 8:45 PM, Little BabyDoll Christine said:

Thanks. Now at lteast we are getting somewhere. Could this also be at my DNS because I just re-upped with them?

This does not happen when I open the link

@Little BabyDoll Christine

It could indeed be a DNS issue:  Sometimes it can take anywhere from 5-10 minutes to a full 24 hours to go through the DNS servers on the internet when you change your IP address. or you add a website.  They Call That TTL (Time To Live). 

I would still recommend that you have your  ISP and your web hosting company check it out, because your website should come up whether it is https:// or http://.  The fact that sandralyn.net resolves to the same address as that porn site is something I would check out, as @DailyDisays because you certainly do NOT want to have someone visit you, and be "surprised" as He was or I was.

We know that you would not have that type of content, so when I saw that, I was like "WOAH!!  Christine would NEVER serve that content, that is NOT like her at all:  I better check this out". The Clue I got was when you did not have a match on your certificate, and when @tuffydid the 'host sandralyn.net' command and it came back as the same IP address as sandralyn.net, I checked it myself, and it came back the same as his output

I would give it til morning to see if there is a change:  when I did the "test" you did, I got the page that you gave, in BOTH http:// and https:// so at least that worked for me now.

When I do the other.sandralyn.net address, NOW I get:

Quote

Forbidden

You don't have permission to access / on this server.

Additionally, a 403 Forbidden error was encountered while trying to use an ErrorDocument to handle the request.

 

So that is GOOD - So, you should be OK for now - those certificates and DNS servers can be flakey sometimes, so waiting a while and checking it out is a good plan!

Good Luck, and Keep us Advised!

Brian

 

[Little BabyDoll Christine]

I re-registered at the DNS about a week ago

This is so alien, what do I tell my webhost?

[tuffy]

Assume this is just a configuration error. Tell them that there seems to be a cert installed that doesn't match your domain name. When that is fixed, check your content and see if you can see any of the thumbnail stuff and delete it. 

[Little BabyDoll Christine]

If I do that. they may thing a ciert is a breath mint from the 1970's and wonder what I am tlaking aobut

[tuffy]

14 hours ago, Little BabyDoll Christine said:

If I do that. they may thing a ciert is a breath mint from the 1970's and wonder what I am tlaking aobut

<rolls eyes> I never know when to take you seriously. You can call it an SSL certificate if you like.

Also, it goes without saying, but I'll say it anyway. I'm assuming you have your own web based administrator interface to your site, so make sure you've changed your password and be sure it isn't simple or short. I use 32 random letters, numbers & symbols these days, though my security friends say I'm too trusting. And one other thing, if they support 2 factor authentication, enable that too.

[Little BabyDoll Christine]

Thank you. Since I do not know what I am talking about here. I take every term literally and as it is presented

[tuffy]

1 hour ago, Little BabyDoll Christine said:

Thank you. Since I do not know what I am talking about here. I take every term literally and as it is presented

No problem 😀

[Little BabyDoll Christine]

They must be having a problem over there. my link does not work and when I go to the home page, I am not logged in and cannot do so but my FTP works fin at that site, and I do not get what you get when I open any of my links