Some fun facts

[Frank419]

@CoolMan

You can use any vPanel login page you want to login to any hosting account that is registered on MOFH/Byet

This is verified
(Byet Host)

(ProFreeHost)

This can somehow tell that the mofh infrastructure is poorly developed(its panel doesn’t have a sort of upstream reseller check)

[Greenreader9]

@Frank419

(its panel doesn’t have a sort of upstream reseller check

What do you mean? I’m pretty sure the ability to login to any cpanel domain was toted as a feature at some point.

Also, any customizations the host owner made (Like adding in advertisements) should be loaded when you login via a different panel.

[ChrisPAR]

@Frank419

This can somehow tell that the mofh infrastructure is poorly developed(its panel doesn’t have a sort of upstream reseller check)

It was even better some years ago, where logging in to another reseller’s panel would log you in with your own account, but with the panel configuration of the reseller you were logging in to. This was changed afterwards; I don’t exactly remember why.

@Greenreader9

Also, any customizations the host owner made (Like adding in advertisements) should be loaded when you login via a different panel.

Yep, althought it wasn’t always like this
I disagree in the spirit that if someone has broken their own reseller, their user could still get a backup by logging in to a different panel that isn’t broken with the reseller’s configuration.

[CoolMan]

• vPanel had an XSS vulnerability which involved going to /login.php and putting something like this after the URL: /><h1>someone XSS'd this before me lolz ~05</h1>. The vulnerability was patched on Jul 09 2023 08:27:50 (that’s when I recieved ticket update)
  view-source from the XSS:
  
  
  
  how it looked like:
  

[Frank419]

Just discorvered this:
There is a real cPanel instance running on https://epizy.com:2083/ , which is probably used by iFastNet themselves.
Similar addresses like rf.gd:2083 , free.nf:2083 didn’t work though. That’s what make me think this panel belongs to ifn.

[anon12011699]

It’s because that domain is no longer on 185.27 IP. It redirects to sv62.ifastnet11.org and I’m guessing it’s one of the premium hosting server (but it has cPanel ID SSO?).

[Frank419]

It gives a redirect to you?
For me it just stays in epizy.com .

@anon12011699

but it has cPanel ID SSO

That’s one of the cPanel’s features I think

[anon12011699]

@Frank419

It gives a redirect to you?

Yup, I checked.

[Admin]

Most of the free subdomain base domains are on an iFastNet premium account.

Fun fact: the base domains get so much traffic that even serving 301 redirects with .htaccess rules far exceeds the 50k hits limit.

[SpookyKipper]

Just found another fact:

infinityfreeapp.com is registered on XVHOST