Proxying a Domain

Hello there,

I have found some weird configuration on a VPN server which their ip is pointing to 1.1.1.1 but the request header is telifon.eu weirdly enough I am finding that this domain is currently on use in hetzner CDN.

Some how the request is going to 1.1.1.1 and im getting forwarded to some place that is not on Cloudflare or at least no nameservers are registered on here so, you have any idea how to replicate or find out how?

It sounds like you’re encountering a setup where a VPN server is proxying requests to 1.1.1.1 & then forwarding them to a domain hosted on Hetzner CDN.

To investigate, you would need to analyze the DNS configuration of the domain in question and trace the network path of the requests. You can use dig or nslookup to check DNS records and traceroute to follow the path requests take through the network. If you have access to the VPN server, you should review its configuration to understand how it’s handling and forwarding requests.

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.