Hello, I've been a member of Perfect Privacy for quite some time now and it seems recently there has been changes made.. I noticed some strange activity on my network so I started wireshark. It appears that the DNS is resolving through i3d.net which clearly states they keep logs of personal and activity. Was wondering if an admin can shed some light on this as it seems a bit odd. Technically, PP doesn't keep logs but the hosting you use certainly do.
sudo nmap 31.204.150.106 -sV -sN -O
Starting Nmap 7.60 ( https://nmap.org ) at 2018-07-16 16:48 CDT
Nmap scan report for hostedby.i3d.net (31.204.150.106)
Host is up (0.11s latency).
Not shown: 988 open|filtered ports
PORT STATE SERVICE VERSION
21/tcp open ftp?
22/tcp open ssh OpenSSH 7.4p1 Debian 10+deb9u3 (protocol 2.0)
23/tcp open ssh OpenSSH 7.4 (protocol 2.0)
80/tcp open http nginx
222/tcp open ssh OpenSSH 7.4p1 Debian 10+deb9u3 (protocol 2.0)
301/tcp open unknown
443/tcp open https?
1152/tcp open winpoplanmess?
1723/tcp open pptp linux (Firmware: 1)
3128/tcp open http-proxy Squid http proxy
5080/tcp open onscreen?
8080/tcp open http-proxy Squid http proxy
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: WAP
Running: Linux 2.4.X|2.6.X
OS CPE: cpe:/o:linux:linux_kernel:2.4.20 cpe:/o:linux:linux_kernel:2.6.22
OS details: Tomato 1.28 (Linux 2.4.20), Tomato firmware (Linux 2.6.22)
Network Distance: 8 hops
Service Info: Host: local; OS: Linux; CPE: cpe:/o:linux:linux_kernel
Now, if you go to the IP address directly, it's the perfect-privacy.com/info page. Admin input would be greatly appreciated as my membership expires in 6 days. Thank you.
sudo nmap 31.204.150.106 -sV -sN -O
Starting Nmap 7.60 ( https://nmap.org ) at 2018-07-16 16:48 CDT
Nmap scan report for hostedby.i3d.net (31.204.150.106)
Host is up (0.11s latency).
Not shown: 988 open|filtered ports
PORT STATE SERVICE VERSION
21/tcp open ftp?
22/tcp open ssh OpenSSH 7.4p1 Debian 10+deb9u3 (protocol 2.0)
23/tcp open ssh OpenSSH 7.4 (protocol 2.0)
80/tcp open http nginx
222/tcp open ssh OpenSSH 7.4p1 Debian 10+deb9u3 (protocol 2.0)
301/tcp open unknown
443/tcp open https?
1152/tcp open winpoplanmess?
1723/tcp open pptp linux (Firmware: 1)
3128/tcp open http-proxy Squid http proxy
5080/tcp open onscreen?
8080/tcp open http-proxy Squid http proxy
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: WAP
Running: Linux 2.4.X|2.6.X
OS CPE: cpe:/o:linux:linux_kernel:2.4.20 cpe:/o:linux:linux_kernel:2.6.22
OS details: Tomato 1.28 (Linux 2.4.20), Tomato firmware (Linux 2.6.22)
Network Distance: 8 hops
Service Info: Host: local; OS: Linux; CPE: cpe:/o:linux:linux_kernel
Now, if you go to the IP address directly, it's the perfect-privacy.com/info page. Admin input would be greatly appreciated as my membership expires in 6 days. Thank you.
