cancel
Showing results for 
Search instead for 
Did you mean: 
1

Ask

2

Reply

3

Solution

allot.com trying to intercept my Internet traffic

WhiteKnight
3: Seeker
3: Seeker

Hi

 

allot.com is trying to man-in-the-middle attack me from your network. Please could you address this. I need to use NordVPN to for work. Every time I open the application it asks me if I want to trust this certificate. I, like the rest of the world, do not trust this certificate and will not select trust. I do not have Secure Net enabled on my account.

 

NordVPN_ZS0ofz6wNs.png

Thank you

1 ACCEPTED SOLUTION

WhiteKnight
3: Seeker
3: Seeker

For future reference the problem domain was zwyr157wwiu6eior.com. auth.zwyr157wwiu6eior.com redirects to nordaccount.com, so it is theirs. However they don't seem to want to confirm this. Vodafone seems to have resolved this given that it is now working as expected, although they seemed to fail to understand the issue. Essentially when the NordVPN starts on Windows 10 it loads various domains, including the above. If the prompt appears, selecting "Don't trust" allows you to continue to the app and use the VPN without issue. However the auto-update feature may be trying to use the above address and so fail if it is being attacked like this.

View solution in original position

13 REPLIES 13

Amazon Web Services are the biggest public cloud company in the world, so it is no surprising that people are using them. A lot of the biggest companies in the world use their services. The same goes for CloudFlare, Akamai and Markmonitor. You clearly have personal opinions about their services.

 

Thank you for trying to explain. I build secure infrastructure for companies, as well as performing full stack website development. I'm trained in system security and so know quite a bit about how networks and the Internet works in general. There is no way that you would know this so I understand your need to try to explain, but I do know what I'm talking about.

 

This problem has to do with Vodafone, with their partner services, providing a DNS response for a website/web service that is different from what the owner of the domain set. This DNS response if allowed would place them between me and the website/web service I want to access. I would expect Secure Net to not provide the correct DNS response for certain websites (for instance preventing adult content), as this is how it would provide some of its protections. What probably was occurring was that they suspected that this was a malicious website/web service and so tried to block it this way. However I had Secure Net off at the time, so it is frustrating that it was blocked. I also had no way to directly request the domain to be allowed.

 

You are the only person speaking about Internet Explorer (which Microsoft is rightly actively pushing people away from), cross site scripting and making other comments about things not directly related to this conversation. I see no point in continuing this conversation with you, so this will be my last response related to this.

Its all good.

Good luck

@Juliianadiniz Sorry I only saw this now. It eventually went away. I reported it in various places so Vodafone probably solved it for me.

Keep your eye on it. Monitor your bandwidth too.

Good luck 🙂