Webhook is being hijacked and redirected to a spam website

General
1

What is the name of the domain?

What is the issue you’re encountering

When using webhook to post to site, it is being hijacked and redirected to a spam website

What steps have you taken to resolve the issue?

Testing in browser the same URL works fine.
Using Postman, I get the same error - it gets redirected.
I’ve turned on DNSSEC
Not sure what else to try.

What are the steps to reproduce the issue?

Post or Get to COSMICTOTO Situs Slot Gacor Maxwin Terbaik Dan Anti Rungkad Hari Ini

2

The host coach.accumatchbi.com is not proxied, so any POST request that’s being redirected is happening on your origin. (I assume that’s the site you posted, if it redirects then the forum will show the redirect target instead of the site you posted).
https://cf.sjr.dev/tools/check?d924e1c6ad5f42c1a13bfd727a5d482c#dns

1 Like
3

Yes, the forum is showing the redirected spam site.

4

Can you give your domain using the </> button to put it in backticks so the forum doesn’t treat it as a URL and follow the redirect. Like this

5 
https://coach.accumatchbi.com
6

It is not proxied because it run a laravel app. It’s not a hosted site.

7 
https://coach.accumatchbi.com/webhook/subscription/

This should trigger the webhook and works fine if posted via browser as url

8

That’s the one I tested. As I said, it’s not proxied so is not being redirected on Cloudflare. You’ll need to check your origin.

9

Understood. Thanks.
I thought since the DNS is controlled by Cloudflare that maybe the hijack is a DNS one.

10

You can easily check by looking to see that the DNS record is set as it should be.

11

This topic was automatically closed 2 days after the last reply. New replies are no longer allowed.