• Halloween is coming! To celebrate the occasion, we dusted off a couple of old skins, and even created a brand new one (Pixel).
    To get into the festive spirit, install the Skins extension.
  • The new Python extension is now available. It allows customers to deploy and manage WSGI-based Python applications on their websites directly from Plesk.
  • The Plesk Mobile apps for iOS and Android and the Plesk Mobile Center extension have been deprecated, and are no longer available for new installations. In Plesk Obsidian 18.0.84, the Plesk Mobile Center extension will be removed from servers during the upgrade, and the Plesk Mobile apps will lose their server management features.
  • The Social Login extension has been deprecated and will be removed in Plesk Obsidian 18.0.84. After that, it will no longer be possible to log in to Plesk with a Google, Facebook, GitHub account, or with a passkey. Plesk usernames and passwords, as well as logging in with a WebPros Account, are not affected.

HTTPS Hacked, please help

R

rocksoft

Guest
hello,

one of our server is having issue under plesk 8.2 windows. when enter from browser, http works ok but with https it goes to hacked page (HACKED BY HALLELUJAH) which mean all sites under this ip having this problem when the domain being entered by https:// but in http:// mode,site works ok. and it only affect 1 of the ip.

1. what is this, and how can i fixed it? i have checked the server and didn't found anything. i even tried to recreate the self-signed cert,but still the same.

2. or at least let me know how to disable https in every domains that don't have paid certificate installed as i prefer a domain that support https is the domain that had installed a paid certificate. page not found is good for domain that does not have paid cert installed.

hope someone will help

thanks
 
issue solved...

http://forum.swsoft.com/showthread.php?t=51963&highlight=https

one site is using ssl support but the ip was shared among other domains, so all other domains https:// will redirect to the domain that owned the cert under this ip and it happen this user put a hoax page saying hacked..

so just make group operation for all domains and put Off on ssl support

thanks
 
Arrgh! I bet that was scary! I hope you told the user off! They should not do things like that ;-)

Faris.
 
Back
Top