wolstech

No problem. Please let us know if you need anything else.

Your account has been reset. You'll receive an email shortly with a link to create a new account.

The domain programasherrera.helioho.st has been added to your account. It can take up to 2 hours to start working.

The file in question is a backdoor (web shell) that allows whoever included it in that theme to access your account and do whatever they want, including upload and download files, dump your databases, and similar. Your index.php also contains malware, probably put there by the attacker. Malware accounts require a reset without a backup in order to be unsuspended, which permanently deletes your account's contents. Are you ready for me to reset your account?

Domain changed. It can take up to 2 hours to take effect. Please be sure to configure DNS.

No, there's still a 10 domain limit per account. However, you are allowed to have more than one account with Morty, so if you need additional domains, you can just buy a second account.

Moved to customer service. Sorry we didn't see this sooner, it was in a forum that's not routinely read by staff.

You’re already at your maximum limit of 10 domains. You can’t add any additional domains unless you remove something.

Domains ending in heliohost.org are no longer available to end users (they've been limited to staff since I believe 2021 or 2022). This change was made because hacked and abusive user accounts sharing the same domain as our website had a tendency to get the entire organization blocked. Many companies don't understand that the content of the subdomains under our domains doesn't belong to us, and at one point the entirety of heliohost.org got banned from Facebook for several years because someone set up a phishing site on a something.heliohost.org subdomain.

You're suspended because your account was found to contain malware at the following path. Reviewing the file shows its a webshell. Can you explain why this is there? /home/steamspace.in/simbaprojects.com/css/fonts/index.php A quick looks shows that there are other infected files as well. The index.php of that simbaprojects.com site is also full of obfuscated code...

The .htaccess that was on there came from the flyingpress cache plugin. I wonder if that plugin is defective... Either way, I'm glad to see you figured it out. A lot of times WP problems are just simple issues even if we can't figure out why they originally occurred.

I don't see any files that would match these URLs on your account. If these are supposed to be dynamically produced by WP, then WP is probably just broken (not uncommon for WP...). Did WP update perhaps? Your site also has a lot of complicated rules in the .htaccess due to some cache plugin that was installed, it's completely possible that plugin broke. Also, when was the last time these pages did work? I remember visiting this site as part of researching another issue a few months ago, and it had the same issue then (subpages didn't work), so that makes me question when this last worked (or if this has ever worked). The only thing I can suggest is to try is turning off the proxy ("orange cloud") on cloudflare, but I'm not sure that's going to do much in this case since the issue is that the server can't find the content. I'd usually suggest renaming .htaccess so its ignored too, but in this case that may just make the issue worse, especially if you're relying on rewrite rules for pretty URLs.

A VPS comes as an empty linux box, so you should be able to just install tomcat on it and have it work. Krydos or MoneyBroz may be able to provide assistance with this installation. Escalating.

Credit added. Thank you for the top up.

Domain added. Please be sure to configure DNS for your domain (either using our name servers or by pointing it to the A and AAAA records shown in Plesk). The domain can take up to 2 hours to function.

Your site seems to be working fine for me. Where are you seeing this error?

Duplicate request. Please see https://helionet.org/index/topic/65883-appeal-regarding-possible-terms-of-service-violation/

The account yolder has been unsuspended. Shared networks will indeed cause this issue. It may take a little while to start working again.

Domain changed. It can take up to 2 hours to function.

That account is not suspended. The server's /tmp folder was full, which has since been fixed.

Should be fixed. /tmp was full again...

The httpdocs folder is Plesk's equivalent of public_html. You can just put the files in there.

This support request is being escalated to our VPS admins.

It's not related to your Tommy incident. It's because the VPS is queued for manual build. I'm pretty sure CentOS Stream10 is not an OS that can build automatically (if I remember right, only Ubuntu and Alma set up automatically). As a result you'll need to wait for a VPS admin to manually create that for you and send you the information. Escalating for attention of a VPS admin.

Well that's weird. I do see two successful password resets for you. What happens if you try to log into Morty directly at https://morty.heliohost.org/ ? Should be talesaz and whatever password you last set. Also, keep in mind that Plesk does not support passwords containing spaces or non-English characters.