Ghost in our webshop......

Forums › IT Pro and developers › Ghost in our webshop......

Symbioter

11 posts

Geek

#259940 31-Oct-2019 22:23

Hi Guys, newbie here seeking for help.

I'm owner of web-shop www.skodaparts.co.nz established nearly 6 years ago, running on PRESTASHOP 1.6 platform.

Last month we received few complains from NZ customers that the website cannot be open- redirected to australiansawarded.com.au or warning about "insecure connection" shows instead our website.

The problem grooving, many customers are affected by now especially Orcon, Vodafone, 2 degrees customers. Spark is absolutely fine..... Home broadband users are affected- if only data used all works fine. This issue is only for NZ customers, rest of the world can access our website without problem. I called Orcon and Vodafone tech support they cannot ID the issue, but they confirmed that no one blocking our IP address .

We use godaddy VPS and crazy domains for hosting and SSL- those two companies cannot ID the issue as well.

Any ideas how to solve the mystery will be really appreciated.

Cheers

Vic

1 | 2

3816 posts

Uber Geek

ID Verified

Trusted

Lifetime subscriber

#2346989 31-Oct-2019 22:27

Does a PING or TRACERT show the correct/same IP address when the problem is occurring?

Is it possible the domain hosting was moved in the past, and the old hosting provider failed to delete the DNS records? I've had that happen before when a client bought a domain name off a scalper.

“Don't believe anything you read on the net. Except this. Well, including this, I suppose.” Douglas Adams

Referral links to services I use, really like, and may be rewarded if you sign up:
PocketSmith for budgeting and personal finance management. A great Kiwi company.

Lenovo

Shop now for Lenovo laptops and other devices (affiliate link).

Symbioter

11 posts

Geek

#2346991 31-Oct-2019 22:46

We started wit Crazy Domains on shared server, but shop got big and we're forced to go VPS - we change just the server (godaddy, because 2 years ago godaddy refused hosting co.nz domains.

So the hosting/domains are with CD all the time.

Another weird thing is that when I do "why not padlock" from my end, I see some issues, but if our webmaster does the same thing from overseas he has all green thicks and he's saying that once I do my test from here completely different domain is tested!!

Can this be related some how?

BTW I'm not a geek, so be easy on me with tech talk, please... :)

Cheers

Vic

Dynamic

3816 posts

Uber Geek

ID Verified

Trusted

Lifetime subscriber

#2346993 31-Oct-2019 23:02

From my home Vodafone connection, I see the following...

Web site error and certificate information

Tracert using IPv6 and IPv4

If I test from my work computer, it works fine. Work does not have IPv6 enabled. If I disable IPv6 on my home computer, I can access your web site just fine.

So..... I think the IPv6 address for your web site is wrong. More and more broadband routers and connections are using IPv6, which may explain why the issue is growing, as the most common IPv4 address space has been running low for years.

I appreciate this is tech speak. Who helped you set up the site? Can they get involved to resolve this?

Just by chance, I am local to you, but any hands-on assistance with this would be as a commercial service via my IT Support company.

Cheers
Mike

“Don't believe anything you read on the net. Except this. Well, including this, I suppose.” Douglas Adams

Referral links to services I use, really like, and may be rewarded if you sign up:
PocketSmith for budgeting and personal finance management. A great Kiwi company.

michaelmurfy

meow
13181 posts

Uber Geek

Moderator

ID Verified

Trusted

Lifetime subscriber

#2346995 31-Oct-2019 23:08

For starters - your website is incredibly slow... It took 15 seconds to load for me. You should seriously consider shifting it to Sitehost here in NZ who are great.

But your problem is due to an "AAAA" (IPv6) record on your domain that is likely not for your server, this is the same AAAA record on "australiansawarded.com.au":

;; ANSWER SECTION:
skodaparts.co.nz. 86148 IN AAAA 2404:8280:a222:bbbb:bba1:62:ffff:ffff

Remove this from your domain (via Crazydomains) and things should work fine going forward. I'd also recommend not using GoDaddy as they're an absolute terrible company and also expensive. Since your main site traffic is clearly aimed at NZ you're best to have the hosting in NZ also.

Michael Murphy | https://murfy.nz
Referral Links: Quic Broadband (use R122101E7CV7Q for free setup)

Are you happy with what you get from Geekzone? Please consider supporting us by subscribing.
Opinions are my own and not the views of my employer.

freitasm

BDFL - Memuneh
78995 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#2346996 31-Oct-2019 23:11

This sounds similar to another problem reported here recently. Someone had an AAAA record pointing to wrong server (or shared server incorrectly configured to not listen on IPv6 despite correct address).

I will have a look tomorrow when in front of a computer, unless someone does it first.

My technology disclosure

jarledb

Webhead
3249 posts

Uber Geek

Moderator

ID Verified

Trusted

Lifetime subscriber

#2347000 31-Oct-2019 23:24

Tested with a DNS propagation tool and it looks like its ok.

But the SSL test shows an ip6 address that your site doesn't appear to be on. And there is a problem with the certificate as well.

Look at the test: https://www.ssllabs.com/ssltest/analyze.html?d=www.skodaparts.co.nz

You should also look at what happens if you go to https://www.skodaparts.co.nz - it shows a redirect to http://skodaparts.co.nz and then from there to https://skodeparts.co.nz

You should fix that.

That is to say. The https://www url should redirect to https://domain and not to http://domain

Jarle Dahl Bergersen | Referral Links: Want $50 off when you join Octopus Energy? Use this referral code
Are you happy with what you get from Geekzone? Please consider supporting us by making a donation or subscribing.

Symbioter

11 posts

Geek

#2347004 1-Nov-2019 00:00

Hey guys!

You're all stars here, that's for sure. After so many sleepless nights we finally moved somewhere thanks to all your knowledge. CD agreed that IPv6 (after they were pointed there by me- thanks to all of you) is the issue and finally working on it.

I'll keep you updated.

Have a great rest of the night!

Regards

Vic

michaelmurfy

meow
13181 posts

Uber Geek

Moderator

ID Verified

Trusted

Lifetime subscriber

#2351536 11-Nov-2019 12:23

Please post in this thread - there is no need to start another thread.

You've still got IPv6 AAAA records on your site DNS:

;; ANSWER SECTION:
www.skodaparts.co.nz. 14400 IN CNAME skodaparts.co.nz.
skodaparts.co.nz. 86400 IN AAAA 2404:8280:a222:bbbb:bba1:62:ffff:ffff

;; ANSWER SECTION:
skodaparts.co.nz. 86343 IN AAAA 2404:8280:a222:bbbb:bba1:62:ffff:ffff

Symbioter

11 posts

Geek

#2351542 11-Nov-2019 12:34

Thank you for your response- I'm sorry for duplicating...

Deleting those records will solve it?

Thanks again

Vic

freitasm

BDFL - Memuneh
78995 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#2351543 11-Nov-2019 12:40

Yes.

My technology disclosure

Symbioter

11 posts

Geek

#2351554 11-Nov-2019 12:58

thx, deleted those 2

;; ANSWER SECTION:
www.skodaparts.co.nz. 14400 IN CNAME skodaparts.co.nz.
skodaparts.co.nz. 86400 IN AAAA 2404:8280:a222:bbbb:bba1:62:ffff:ffff

but I'M unable to found the last one....

skodaparts.co.nz. 86343 IN AAAA 2404:8280:a222:bbbb:bba1:62:ffff:ffff

Sorry for being pain in arse... :) I can give you access to CD if you're interested and will pay for your time?

Cheers

Vic

freitasm

BDFL - Memuneh
78995 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#2351561 11-Nov-2019 13:15

The problem is that there's a long TTL on your records. Google 8.8.8.8 and Cloudflare 1.1.1.1 already reply with IPv4 only - my ISP is still replying with the old one and this will continue until that TTL expires.

Patience now.

My technology disclosure

Symbioter

11 posts

Geek

#2351564 11-Nov-2019 13:20

Actually look like it all works now- fingers crossed.

Thank you heaps!

Vic

evilonenz

/dev/urandom
286 posts

Ultimate Geek

ID Verified

Trusted

Lifetime subscriber

#2351565 11-Nov-2019 13:20

You'll probably want to re-add the CNAME for www.skodaparts.co.nz to skodaparts.co.nz. That'll cause issues for anyone trying to use www to get to the site once propagated.

Smokeping

Referral Links:

Quic - Use code R536299EPGOCN at checkout for free setup
Contact Energy - Use code FRTQDXB for $100 credit

LennonNZ

2458 posts

Uber Geek

ID Verified

Trusted

#2351567 11-Nov-2019 13:23

You can easily use

https://developers.google.com/speed/public-dns/cache to flush Google DNS.

https://cloudflare-dns.com/purge-cache/ to flush Cloudflare DNS

https://cachecheck.opendns.com/ to flush openDNS

1 | 2