topic Re: www.myhomeenergy.org.uk in General Topics

www.myhomeenergy.org.uk

Jack_Howells — Thu, 11 Aug 2016 12:40:48 GMT

Hi guys,

Can anyone do me a favour and navigate to http://www.myhomeenergy.org.uk on IE through a Palo.

Does this work for anyone, or do you get a "Page not displayed"?

Kind regards

Jack

Re: www.myhomeenergy.org.uk

santonic — Thu, 11 Aug 2016 13:28:59 GMT

Works ok with IE 11 and PA for me. Tho I have no idea why would anyone want to use IE 🙂

Re: www.myhomeenergy.org.uk

Jack_Howells — Fri, 12 Aug 2016 06:09:40 GMT

Hi,

Thanks for testing this for me.

Looking further into this, the website is actually going to an https website first, as I can see a lot of SSL traffic. When I also enable decryption, I get the following message:

Look at the small text box at the bottom of the screen. Shows it's actually a https website that directs to http.

However when I select yes it doesn't direct me to the site.

Do you have decryption enabled or disabled?

Cheers

Jack

Re: www.myhomeenergy.org.uk

santonic — Fri, 12 Aug 2016 06:29:05 GMT

Ok, the original page is a http. That page has a frame which directs you to https://join.mygreenstarenergy.com/

Those webpages are on different servers:

C:\Users\aaa>dig www.myhomeenergy.co.uk +short
83.125.22.155

C:\Users\aaa>dig join.mygreenstarenergy.com +short
199.167.35.222

In IE nothing happens when i click the frame with redirection. But when i paste the url https://join.mygreenstarenergy.com/myhomeenergy to a new window/tab i get the new page which looks exactly the same but it's on https (https://join.mygreenstarenergy.com/myhomeenergy/I(9kyxgg0)/Enrollment/Home)

In Chrome when i click the frame I get redirected to https webpage as expected.

Maybe in IE webpage succesfully checks IP location and only redirects for UK IPs as I'm not from UK and offer is useless for me. Also the frame name 'uk2netwebdiversion' would suggest UK check. Are you from UK?

Re: www.myhomeenergy.org.uk

Jack_Howells — Fri, 12 Aug 2016 08:30:10 GMT

I am from the UK yes.

Looking into the PCAPs I can see the traffic going to 443 but there are no cipher suites mentioned at all. What version of IE are you running? Can you print screen the About section of IE?

Re: www.myhomeenergy.org.uk

santonic — Tue, 16 Aug 2016 07:32:48 GMT

Re: www.myhomeenergy.org.uk

Jack_Howells — Wed, 24 Aug 2016 13:38:54 GMT

Good news. The issue has been resolved. So the problem was with the DNS hosting services.
The site wasn’t fully redirecting to the https://join.mygreenstarenergy.com/myhomeenergy address.

Nothing to do with the Palo 🙂