[tor-relays] Mystery with Exitnode 4273E6D162ED2717A1CF4207A254004CD3F5307B (176.10.99.200)

Tue Nov 23 16:01:48 UTC 2021

On Tue, Nov 23, 2021 at 03:37:24PM +0000, Tschador wrote:
> in the last few days I noticed a curiosity with the Exitnode
> 4273E6D162ED2717A1CF4207A254004CD3F5307B:
> 
> Every time I call 'https://www.startpage.com', the URL in the Browser
> changes to 'http://localhost/'.
> 
> Other browser: same effect.
> Other sites - no problem.
> Other Exitnodes - no problem with 'https://www.startpage.com' and other
> sites.

It happens to me too, from that exit relay:

"""
$ torify curl -i https://www.startpage.com/
HTTP/1.1 307 Temporary Redirect
Server: nginx
Date: Tue, 23 Nov 2021 15:58:56 GMT
Content-Type: text/html
Content-Length: 180
Connection: keep-alive
Location: http://localhost/
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload

<html>
<head><title>307 Temporary Redirect</title></head>
<body bgcolor="white">
<center><h1>307 Temporary Redirect</h1></center>
<hr><center>nginx</center>
</body>
</html>
"""

I believe we are making a successful request to
https://www.startpage.com/, and that is the reply that the webserver is
sending us.

That is, everything in the Tor side is working as expected, and startpage
is sending a response that isn't what we wanted. Maybe it is a bug
on their side, or maybe it is some sort of anti-abuse mechanism on
their side.

--Roger