Big ddos attack, my site is not working, can you investigate?

[nullethebeast]

What is the name of the domain?

divtemplate.com

What is the error number?

525

What is the error message?

Handshake SSL non riuscito Codice errore 525

What is the issue you’re encountering

I received a very heavy ddos ​​attack

What steps have you taken to resolve the issue?

I contacted namecheap hosting and they told me to contact cloudflare support directly to investigate this issue further

What are the steps to reproduce the issue?

This is the namecheap message I received, advising me to contact cloudflare support directly:

"Hello,

Thank you for contacting the Namecheap Support Team!

We are sincerely sorry to hear about the issue with your domain divtemplate.com.

Upon our check, it is active and is successfully pointed to the following nameservers of Cloudflare:

Cloudflare DNS | Authoritative and Secondary DNS

Cloudflare DNS | Authoritative and Secondary DNS

From our end, it resolves the following error in the browser:

“SSL handshake failed Error code 525
Visit cloudflare.com for more information”

Please check the screenshot attached.

In this case, we recommend contacting Cloudflare directly so they can investigate this issue further from their end.

If you have any additional questions, please let us know. "

Screenshot of the error

[fritex]

@nullethebeast

Handshake SSL non riuscito Codice errore 525

Please double-check your SSL certificate at the origin host and adjust the SSL/TLS option at Cloudflare dashboard accordingly.

1. Use the “Pause Cloudflare on Site” option from the Overview tab for your domain at dash.cloudflare.com .
2. The link is in the lower right corner of that page.
3. Give it five minutes to take effect, then make sure site is working as expected with HTTPS without any error
4. Check with your hosting provider / Plesk panel / cPanel AutoSSL / Let’s Encrypt / ACME / Certbot and manually click to renew it
5. Only then, when your website responds over HTTPS, you should un-pause Cloudflare and double-check your SSL/TLS setting to make sure it’s set to Full (Strict).

@nullethebeast

a very heavy ddos ​​attack

Helpful article:

Mitigating an HTTP DDoS Attack manually with Cloudflare

This guide is for those users of Cloudflare who experience medium-high level complexity DDoS attacks. Continue reading if you want to accomplish the following: Becoming more familiar with the Cloudflare Dashboard and crafting custom firewall rules. Understanding the standard behavior of DDoS attacks and deploying effective firewall rules. Realizing how powerful and valuable Cloudflare Firewall Rules are. I initially thought of making a more complex guide (I will). However, I realized that no…

[nullethebeast]

Change the SSL/TLS option in the Cloudflare dashboard accordingly.

SSL/TLS:
Current encryption mode: Full

SSL NAMECHEAP ACTIVE

I paused cloudflare but unfortunately it doesn’t work, I followed all the steps shown correctly, how can I solve this very serious problem? Thanks in advance

[fritex]

@nullethebeast

SSL NAMECHEAP ACTIVE

@nullethebeast

Current encryption mode: Full

Since it’s a valid SSL certificate, may I ask what happens when you switch to Full (Strict) instead?

At Namecheap, looks like HTTPS redirect option is also enabled.
Wondering if it might be the case you’d have some issues with redirection then, or not.

[nullethebeast]

I disabled the redirect, it still doesn’t work

[fritex]

@nullethebeast

I paused cloudflare but unfortunately it doesn’t work

That sounds like you’d have to contact your hosting provider and cross-check with them if your Website doesn’t work even when Cloudflare is paused, then something is blocking or limiting the access such as firewall or wrong configuration file on the origin.