1.5 KiB
[2026-09-17] dragonfireacoustics.com IS configured on pfi-ana-webhost, and the whole thing is dead — a forgotten public-facing VM.
dragonfireacoustics.com IS configured on pfi-ana-webhost, and the whole thing is dead — a forgotten public-facing VM. It is a ServerAlias on the dragonfirepro.com Virtualmin vhost (DocumentRoot /home/dragonfirepro/public_html, suexec 1001), which is the only enabled site on the box. State: www. → 38.120.12.45 → DNAT to 10.250.50.52 (proven, not inferred — identical cert SHA-256 inside and out), Apache answers 403, and the Let's Encrypt cert (CN=dragonfirepro.com, SAN www.dragonfireacoustics.com) expired 2025-08-17, 13 months ago. The apex points to 199.250.192.76, not ours and not answering at all. ⚠ CORRECTED — the customer did not migrate dragonfirepro.com, they LOST it. RDAP: re-registered 2025-09-27 through Domain Science Kft (Hungary, IANA 3882) on dns-redirect.com nameservers, and it now redirects to expireddomains.com listed FOR SALE as an "established .com (6y)". It lapsed, dropped and was sniped. (The earlier "moved to a SaaS platform" read of its 6 foreign A records was wrong — that is parking infrastructure.) /home/dragonfirepro mtime 2025-04-12. ⚠ The VM is Debian 11, whose LTS window closed end of August 2026 — an unsupported OS exposed on public 80/443 for a site serving nothing. Retire / fix / tell-the-customer-to-repoint is an OPERATOR call: it is a customer relationship, not a technical one. Nothing touched.