Topic: FurAffinity: weird Cloudflare/network errors

Posted under Off Topic

So, early in the morning of 2024-08-20 (US time), I tried to go to FA.

Error 1016 Ray ID: [hex hash] • 2024-08-20 05:38:42 UTC
Origin DNS error

What happened?

You've requested a page on a website (www.furaffinity.net) that is on the Cloudflare network. Cloudflare is currently unable to resolve your requested domain (www.furaffinity.net). 

Less than ten minutes later, it worked again. OK, log in to FA, look through new submissions, favorite the ones that I like. Favorite a few, then try to favorite another, and get this...

Secure Connection Failed

An error occurred during a connection to www.furaffinity.net. Cannot communicate securely with peer: no common encryption algorithm(s).

Error code: SSL_ERROR_NO_CYPHER_OVERLAP

    The page you are trying to view cannot be shown because the authenticity of the received data could not be verified.
    Please contact the website owners to inform them of this problem.

I don't think I've ever seen the "no cypher overlap" message before, in a couple of decades of being on the internets.

What even is happening?

kora_viridian said:
So, early in the morning of 2024-08-20 (US time), I tried to go to FA.

Error 1016 Ray ID: [hex hash] • 2024-08-20 05:38:42 UTC
Origin DNS error

What happened?

You've requested a page on a website (www.furaffinity.net) that is on the Cloudflare network. Cloudflare is currently unable to resolve your requested domain (www.furaffinity.net). 

Less than ten minutes later, it worked again. OK, log in to FA, look through new submissions, favorite the ones that I like. Favorite a few, then try to favorite another, and get this...

Secure Connection Failed

An error occurred during a connection to www.furaffinity.net. Cannot communicate securely with peer: no common encryption algorithm(s).

Error code: SSL_ERROR_NO_CYPHER_OVERLAP

    The page you are trying to view cannot be shown because the authenticity of the received data could not be verified.
    Please contact the website owners to inform them of this problem.

I don't think I've ever seen the "no cypher overlap" message before, in a couple of decades of being on the internets.

What even is happening?

You prolly should change your FA password as soon as possible 'cause I saw a post on the FA Discord from from Luffy that there was/is a domain hijacking attempt on Furaffinity. Whoever it was tried to redirect the domain to a non-Furaffinity site, which could lead to a phishing page that mimics FA's appearance. That point where you could connect to FA and log in might have been a man-in-the-middle attack that captured your login info by serving up the actual FA pages, but the attackers sit in the middle between you and FA's servers to nab login info.

gauss said:
You prolly should change your FA password as soon as possible 'cause I saw a post on the FA Discord from from Luffy that there was/is a domain hijacking attempt on Furaffinity.

Understood, thank you. There is another post here on the e621 forums regarding this same issue, that FA might have been compromised.

kora_viridian said:
Understood, thank you. There is another post here on the e621 forums regarding this same issue, that FA might have been compromised.

Going by the updates in the OP in that thread, if I'm reading it right, there was a half hour window where the DNS records didn't point at FA's servers, but there's no indication so far that they pointed to another server.
Best keep a eye out on the official FA Discord and Twitter for a all-clear, then login and change your password.

  • 1