My domain was hijacked by Webmin?

SYSTEM INFORMATION
OS type and version MAC OS Sierra
Webmin version REQUIRED

Hello,
I failed to make a payment on one of my sites and it ends up parked in the Virtualmin. It says, if this is your domain you need to login. When i press to login it brings up a prompt to enter username and password for: vmi310999.contaboserver.net
Can somebody help me with this? What happened?

No. This is not Webmin.

I’m not sure if you are mixing up terms here.
‘Site payment’ would be your registrar hijacking your DNS to their web page. I don’t know about other registrars but the one I use does nothing. You just can’t reach the site.

This sounds more like Contaba thinks you owe them money for the server space.

But, this hijack is done before the traffic reaches your machine and Webmin.

Thanks for the quick reply! How come a Webmin prompt window comes up when i press: login to Virtualmin? Please see for yourself: https://iepics.com/
Thanks again

OK. This is not what I expected from what I read in the first post.

Back to the beginning. You mention both Webmin and Virtualmin.

If you set up the domain using Virtualmin, I’m not sure how non-payment would be reflected by the software. Was the site working correctly previously?

If you can get logged into the server have you checked to make sure the files are still all in place? Have you checked the web configuration page to make sure the the path is correct.

If all that is in place then maybe somehow your index.html got whacked and the default shows up?

No, i’ve never even heard of Virtualmin until this situation. I think i registered the domain with register.com or something similar and had it either pointed to or transfered to for hosting to ipage.com That’s where it’s been living for the last several years. Then i miss the expiration deadline to renew and get this Virtualmin landing page with a weird Webmin prompt. On ipage it’s listed as disabled.

Did you install Webmin or is this the first you’ve heard of it? If I ping the site I get:

hermit@~:ping  iepics.com
PING iepics.com (173.212.235.191) 56(84) bytes of data.
64 bytes from vmi310999.contaboserver.net (173.212.235.191): icmp_seq=1 ttl=48 time=136 ms

Was the late payment to Contaba? This seems to be their issue. We’ve seen this before. People come here because they suddenly seen Webmin and mistakenly believe that this software is involved. It is not. It is the software installed to where you are being redirected.

I’ve never heard of neither, Virtualmin or Webmin. I’ve made my payments via ipage.com
I spoke with ipage.com and they have no claims for any outstanding payments against me. Also, when i look up the registrar - it’s Dynadot - also, never heard of it. :). it’s a mystery

No it wasn’t.

We make software. We are not a hosting provider or a registrar, and we have no relationship with the person or company that is hosting the site you see. They’re merely using our software to manage their server (which is true of 150,000 or so servers for Virtualmin). It is Open Source software, so anyone can download it and use it.

In your case, it sounds like the following events happened (this is a guess):

  1. Your domain registration lapsed/expired.
  2. Someone else registered the domain (no longer yours, because registration lapsed).
  3. They pointed the newly registered domain to their own server. That server happens to be running Virtualmin.

It may have also been a transfer, but you should have received email about a transfer, and been required to send a transfer approval key.

We had nothing to do with any of it.

Your options are limited, and not my area of expertise, and they have nothing to do with Webmin or Virtualmin.

Your registrar is probably who you have a problem with, since based on this comment, your domain has either expired and been bought by someone else or a transfer was allowed that you didn’t approve:

Webmin/Virtualmin is irrelevant to all of this. You need to speak to your registrar and your hosting provider, and we are neither of those things.

1 Like

Understood. Thank you for this detailed response.
I appreciate you

This topic was automatically closed 8 days after the last reply. New replies are no longer allowed.