Please register to participate in our discussions with 2 million other members - it's free and quick! Some forums can only be seen by registered members. After you create your account, you'll be able to customize options and access all our 15,000 new posts/day with fewer ads.
That site is sitting behind Cloudflare's network, Cloudflare is only useful if you protect the origin server IP. If the IP is compromised the attacker can go right around Cloudflare and directly attack the IP. If that is what has occurred Jones could have backup server and you only need to go into Cloudflare's panel and change the origin server IP. That backup server could be intended to only serve simple page like that or it could fully replicate the site if they had it set ity up that way. To take that offline the attacker would need to determine the new IP.
The site is on the same IP it was on yesterday and the back pages are 404 - meaning Jones scrubbed the site himself... and still has access to keep tinkering with the front page adding a Donate button and a jpeg of a video.
That site is sitting behind Cloudflare's network, Cloudflare is only useful if you protect the origin server IP. If the IP is compromised the attacker can go right around Cloudflare and directly attack the IP. If that is what has occurred Jones could have backup server and you only need to go into Cloudflare's panel and change the origin server IP. That backup server could be intended to only serve simple page like that or it could fully replicate the site if they had it set ity up that way. To take that offline they would need to determine the new IP.
If the backup server was fully replicating the site, then the site wouldn't be down, right?
Which, actually, it doesn't appear to be down. Its links work, its donate button works, you can still shop at the store. It just has a banner now saying they are under attack. Oh my!
That is a Cloudlfare network IP, attacking that IP is like poking the bear. Cloudflare is proxy network that communicates with the origin server. If the origin server IP is determined you can make requests directly to it circumventing Cloudflare's DDOS protection
If the backup server was fully replicating the site, then the site wouldn't be down, right?
Correct and it would stay that way as long as they were unable to determine the new IP of the backup. That involves a lot of expense because your server costs just doubled. Another option is to just change the IP of the server.
I have unused IP on my own server for an event like this however before I would deploy that my first task is to determine how they found the first one. No sense burning an IP if you have not determined where the vulnerability is. There is likely some server administrator furiously looking at log files to determine what happened.
Quote:
Its links work, its donate button works, you can still shop at the store. It just has a banner now saying they are under attack. Oh my!
Those are different domains likely on their own IP's, they would need to know the IP's of those domains to attack them. The only link to infowars.com is the donate button to simple .html page which again can easily be served by low cost backup server.
It would be far more effective on his part to actually have it just go down, or create a homepage that looks like an error, or something, if people really are taking it down. Let it sit a day. Really sell it if it's happening anyways.
But I guess at least some people on Twitter are buying this no questions seemingly asked (despite others pointing out suspicious stuff about it being up still), so maybe not much effort needed.
Oh and now a Donate button added to the new homepage.
A donate button? He makes a lot of money on the varieties of products he peddles. He is not a non-profit endeavor, and donations will not be deductible, they are essentially gifts.
The only thing suspicious about this is Jones himself. Everything you are seeing here is entirely possible.
Possible and probable are different things, but sure. The fact that they aren't even questioning the mildest of problems, even if there are possible explanations, makes it easy for him to do whatever in any circumstance.
Last edited by latimeria; 08-14-2018 at 03:07 PM..
Please register to post and access all features of our very popular forum. It is free and quick. Over $68,000 in prizes has already been given out to active posters on our forum. Additional giveaways are planned.
Detailed information about all U.S. cities, counties, and zip codes on our site: City-data.com.
Please register to participate in our discussions with 2 million other members - it's free and quick! Some forums can only be seen by registered members. After you create your account, you'll be able to customize options and access all our 15,000 new posts/day with fewer ads.
