[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 382
  • Last Modified:

URL Forwarded Without Permission

There is this situation:

www.ABC.com domain and web service is being hosted by my provider. I am the sole administrator for this. Somehow one day, when entering this URL, www.ABC.com, the address bar on my browser now shows as www.ABCD.com. The contents of the page is exactly the same as www.ABC.com.

What is going on? Should i be worried? Pinging both URL results in the same IP address which is registered to me. I checked on my panel that i did not enable URL forwarding of any kind...
0
r3v3n3nt
Asked:
r3v3n3nt
  • 5
  • 5
  • 3
2 Solutions
 
GaryCommented:
Are you able to post the url, are you sure its not just yourself seeing this?
How does the second url differ from the original?
0
 
Dave BaldwinFixer of ProblemsCommented:
I'd check 'whois' to see if they both come up with the same info, presumably yours.  http://www.internic.net/whois.html
0
 
r3v3n3ntAuthor Commented:
No everyone who enters the web address gets diverted to the other one. I checked and the other domain does not belong to me but someone else. Question is how are they able to do this. I initially thought site redirection had to be done on my end
0
Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

 
GaryCommented:
They can set their nameservers to point to your ip but not the other way around, are you sure your account/server hasn't been hacked.
You say pinging the urls gives your ip - double check the name servers are pointing to your ip.
How does the second url differ from the original? Is it completely different or just a bit different.
0
 
r3v3n3ntAuthor Commented:
The URL is slightly different. For example, let's say my URL is www.solution.com. It resolves to an IP Address of 1.1.1.1.

Now when i enter this URL www.solution.com, in the address bar, it automatically changes to www.solutions.com. Pinging both addresses resolves to 1.1.1.1.
0
 
GaryCommented:
Without an actual website to investigate, I cannot think of anything to offer.
0
 
r3v3n3ntAuthor Commented:
Okay. The web site is as follows: creativelyactiveminds.com = This is the correct web site and belongs to the owner. However entering this web site brings me to creativelyactivemind.com which brings me to the same web site. Checking the whois for the domain it obviously belongs to someone else, but its server is pointing to my registered internet IP Address.

Question is how is this person able to do this to me?
0
 
Dave BaldwinFixer of ProblemsCommented:
Why do all of the file links in the source code on the site point to www.creativelyactivemind.com without the 's'?
0
 
r3v3n3ntAuthor Commented:
How do you see that? From my understanding, nothing was changed.

This is exactly the problem i am having now. I don't own that site (The one without the 'S').
0
 
GaryCommented:
Ok after a quick check (will have to get back to this tomorrow very late for me) they are not the same NS or same IP.
But it is very curious...
0
 
r3v3n3ntAuthor Commented:
Yes i checked too it is two different Name Servers. The Name server that we are using is the correct one obviously the domain without the "S" is using a different name server but the host record 'A' is pointing to my IP Address.
0
 
Dave BaldwinFixer of ProblemsCommented:
Just look at the "View Source" to see the links.  The Wordpress redirects are undoubtedly changing the name and that mean (I think) that the base name in the database has been changed also.  There are several places in the Wordpress database that the 'siteurl' is defined.  One is the first row 'siteurl' in the 'wp_options' table.  Also a row for 'home'.  Then the 'guid' in the 'wp_posts' table.
0
 
GaryCommented:
Your server is requesting redirection as soon as the page is requested.
0

Featured Post

Upgrade your Question Security!

Add Premium security features to your question to ensure its privacy or anonymity. Learn more about your ability to control Question Security today.

  • 5
  • 5
  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now