Link to home
Start Free TrialLog in
Avatar of r3v3n3nt
r3v3n3nt

asked on

URL Forwarded Without Permission

There is this situation:

www.ABC.com domain and web service is being hosted by my provider. I am the sole administrator for this. Somehow one day, when entering this URL, www.ABC.com, the address bar on my browser now shows as www.ABCD.com. The contents of the page is exactly the same as www.ABC.com.

What is going on? Should i be worried? Pinging both URL results in the same IP address which is registered to me. I checked on my panel that i did not enable URL forwarding of any kind...
Avatar of Gary
Gary
Flag of Ireland image

Are you able to post the url, are you sure its not just yourself seeing this?
How does the second url differ from the original?
I'd check 'whois' to see if they both come up with the same info, presumably yours.  http://www.internic.net/whois.html
Avatar of r3v3n3nt
r3v3n3nt

ASKER

No everyone who enters the web address gets diverted to the other one. I checked and the other domain does not belong to me but someone else. Question is how are they able to do this. I initially thought site redirection had to be done on my end
They can set their nameservers to point to your ip but not the other way around, are you sure your account/server hasn't been hacked.
You say pinging the urls gives your ip - double check the name servers are pointing to your ip.
How does the second url differ from the original? Is it completely different or just a bit different.
The URL is slightly different. For example, let's say my URL is www.solution.com. It resolves to an IP Address of 1.1.1.1.

Now when i enter this URL www.solution.com, in the address bar, it automatically changes to www.solutions.com. Pinging both addresses resolves to 1.1.1.1.
Without an actual website to investigate, I cannot think of anything to offer.
Okay. The web site is as follows: creativelyactiveminds.com = This is the correct web site and belongs to the owner. However entering this web site brings me to creativelyactivemind.com which brings me to the same web site. Checking the whois for the domain it obviously belongs to someone else, but its server is pointing to my registered internet IP Address.

Question is how is this person able to do this to me?
Why do all of the file links in the source code on the site point to www.creativelyactivemind.com without the 's'?
How do you see that? From my understanding, nothing was changed.

This is exactly the problem i am having now. I don't own that site (The one without the 'S').
Ok after a quick check (will have to get back to this tomorrow very late for me) they are not the same NS or same IP.
But it is very curious...
Yes i checked too it is two different Name Servers. The Name server that we are using is the correct one obviously the domain without the "S" is using a different name server but the host record 'A' is pointing to my IP Address.
SOLUTION
Avatar of Dave Baldwin
Dave Baldwin
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
ASKER CERTIFIED SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial