News for hackers. Stuff that matters.
Re:GitBook bypassing Cloudflare DNS to route traffic to thei... by aussiedude on Wednesday November 23, 2022 @01:28AM (#33715903)
I was honestly confused for a bit, then realised that your site was redirecting to Gitbook.

;; ANSWER SECTION: help.leavemealone.app. 0 IN CNAME help.leavemealone.com.

help.leavemealone.com. 0 IN CNAME leavemealone.helpkit.so.

leavemealone.helpkit.so. 0 IN CNAME helpkit-ssr.onrender.com.

helpkit-ssr.onrender.com. 0 IN CNAME helpkit-ssr.onrender.com.cdn.cloudflare.net.

helpkit-ssr.onrender.com.cdn.cloudflare.net. 0 IN A 216.24.57.3

helpkit-ssr.onrender.com.cdn.cloudflare.net. 0 IN A 216.24.57.253

Re:GitBook bypassing Cloudflare DNS to route traffic to thei... by jivings on Wednesday November 23, 2022 @01:32AM (#33715920)
Yes. DNS shows it should be redirecting to leavemealone.helpkit.so but it actually redirects to dinkydani.gitbook.io
Re:GitBook bypassing Cloudflare DNS to route traffic to thei... by bauruine on Wednesday November 23, 2022 @02:10AM (#33716122)
help.leavemealone.com. is a CNAME to leavemealone.helpkit.so which again is a CNAME to helpkit-ssr.onrender.com. and so forth till you get the A records. Your browser then connects to that IP and there you get the 302 redirect. I'm still not sure what I should see here.

EDIT: This is a CNAME chain and although it's not recommended it's valid https://serverfault.com/a/309660

Re:GitBook bypassing Cloudflare DNS to route traffic to thei... by jivings on Wednesday November 23, 2022 @02:22AM (#33716194)
The A records that you've gotten to are unrelated to Gitbook and there are no 302 redirects on our side. As far as I understand it's some internal redirect happening in Cloudflare's network.

You can read more info here: https://community.cloudflare.com/t/dns-subdomain-no-longer-w...

Re:GitBook bypassing Cloudflare DNS to route traffic to thei... by bauruine on Wednesday November 23, 2022 @03:03AM (#33716431)
Thanks for the explanation. I still don't know exactly what's going on here. How do the DNS records look on the Cloudflare UI?
Re:GitBook bypassing Cloudflare DNS to route traffic to thei... by jivings on Wednesday November 23, 2022 @03:54AM (#33716729)
help.leavemealone.app -> CNAME -> help.leavemealone.com -> CNAME -> leavemealone.helpkit.so

Gitbook is nowhere in the chain

Re:GitBook bypassing Cloudflare DNS to route traffic to thei... by bauruine on Wednesday November 23, 2022 @04:04AM (#33716798)
Then you have to ask helpkit.so why they are using render.com to do the redirect.
Re:GitBook bypassing Cloudflare DNS to route traffic to thei... by bauruine on Wednesday November 23, 2022 @04:29AM (#33716981)
But it's hitting their DNS zone and they have decided to add a CNAME to helpkit-ssr.onrender.com for leavemealone.helpkit.so.
Re:GitBook bypassing Cloudflare DNS to route traffic to thei... by jivings on Wednesday November 23, 2022 @04:24AM (#33716939)
The request is never hitting HelpKit's servers.