All Activity

Geoblocking does not fix the issue, it cannot be hosted at all on our service. If you would like the account to be unsuspended then the financial page will need to be completely removed.

Hello, please unsuspend my account. I have geoblocked critical html page to comply with new California law. Let me know if anything else is needed from my end.

Looks good! You could also just use the nameservers if you wanted to, that way if the server IPs ever change, you don't need to change your DNS to the new IPs. The server IPs do not change often, I've only seen this done to mitigate a sudden DDOS attack. It can take 24-48 hours for DNS to propagate (although personally, mine has never taken that long), but when I check your new domain with dnschecker, it looks to have propagated already! For others who may find this post, we have info on how to check that DNS is properly configured in our Wiki here: https://wiki.helionet.org/Namecheap_DNS_Records#Wait_24_-_48_hours_for_DNS_Propagation

like this?

I’ll upload the files we kept later this afternoon for you when I get to my PC. Once I do so, you’ll see them sitting in your home folder.

If someone goes to quartosconforto.helioho.st do you want them to get redirected so quartosconforto.pt shows in the browser URL bar?

Looks like the user determined they wanted an alias, and raised the alias request (which is now escalated for the root admins to action) here: https://helionet.org/index/topic/67281-alias-parked-domain-setup-for-quartosconfortopt/

This support request is being escalated to our root admins.

I've added that domain to your account for you. Please note that it may take up to 2 hours for the domain change to take effect, and it will not work until you set up your DNS with your domain registrar. To configure your DNS, please see the steps provided on our Wiki to either set NS records pointed at the HelioHost nameservers, or create A/AAAA records and point them to your server's IPv4/IPv6 address: https://wiki.helionet.org/Addon_Domains#Custom_Addon_Domains If after a full 2 hours it doesn't work on your side, please make sure you clear your web browser cache: https://wiki.helionet.org/Clear_Your_Cache

please add my domain: nandor.cc thank you.

Good afternoon, I would like to request that the domain quartosconforto.pt be set to point to quartosconforto.helioho.st by configuring it as an alias / parked domain on my account. The goal is that, when accessing quartosconforto.pt and www.quartosconforto.pt, the same website currently available at quartosconforto.helioho.st is displayed. The domain’s nameservers have already been changed to those indicated by HelioHost: ns1.heliohost.org ns2.heliohost.org I would appreciate it if you could make the necessary configuration on my account and confirm once the process has been completed. Kind regards, Afonso Freitas

Done , thanks for your help

Thank you for your reply. I would like www.quartosconforto.pt to display the same website currently available at quartosconforto.helioho.st. In that case, please let me know whether you recommend configuring it as an alias or as an addon domain, and please add/configure it accordingly on my account. My preference is that quartosconforto.pt becomes the main public domain for the website. Kind regards, Afonso Freitas

The domain won't resolve until we add it to your account. This is normal. As Moneybroz asked above, how do you want this domain configured?

Would you like this domain set as an addon domain or alias?

Dear Sir or Madam, I would like the domain www.quartosconforto.pt to correctly point to my hosting at https://quartosconforto.helioho.st/ . I have already configured your nameservers, ns1.heliohost.org and ns2.heliohost.org, with my domain provider. This change was made about 1 hour ago, but so far there is not even the slightest sign of propagation, as can be seen here: https://whatsmydns.me/pt#A/www.quartosconforto.pt I would appreciate it if you could let me know where the problem may be and please take the appropriate steps to resolve it as soon as possible. Kind regards, Afonso Freitas

Your account has been reset. When the reset process completes, you'll receive an email with a link to create a new account. Once you've created the new account, please let us know so I can upload the backup of the Atlas folder and the process.php file for you.

Closing due to inactivity since there has been no response in this thread for over a week. If you're still having this issue or need help with something else please open a new ticket.

no thanks

That folder only contains one file (process.php) which looks to be a script for sending prebuilt prompts to google gemini. I'll grab that for you as well. I can't back up the entire site because there is malware laying around in a lot of these folders, as well as the phishing site. For what it's worth, I did notice that there is also a Wordpress installation in boomarenio.site/wp/ that is infected. I suspect this is how the phisher got into your account, and is one of the major reasons we don't recommend using Wordpress...it's extremely prone to being hacked. Anything else before I reset the account for you?

https://boomarenio.site/api this folder , if there is more than file backup all

I've backed up the contents of the atlas folder for you (looks like its mostly pictures for an ophthalmology guide of some kind). Once the account is reset, I'll upload this into your home folder for you. There is no file called prompt.php on your account that I can find (it's possible the hacker deleted it, there's several different webshells and PHP-based FTP scripts laying around in your account which I assume were uploaded by the hacker to make it easier for him to set up the phishing). Do you know where the prompt.php would have been?

keep those as it is: 1- project boomarenio.site/atlas 2- file prompt.php reset rest

The only option offered for phishing caused by an account being hacked is a full reset without a backup, which deletes all of the data and lets you start over. If there are a few specific files you know you need, we can see about grabbing those for you before resetting, but we cannot provide a backup of the entire website or account due to the presence of illegal/stolen information from the phishing site. Please let us know when you're ready to reset your account.

I have no idea about this page , at least can i recover my other pages files ? or you can delete the phishing pages at all