api.opensubtitles.com is down. Hacked?

[swishly]

We are a paying customer for the API, we are seeing ssl certificate errors when accessing https://api.opensubtitles.com or https://opensubtitles.com. When using the non-ssl version http://opensubtitles.com redirects to the Apple website (presumably an affiliate link)

Looks like the domain was hacked? Can this be fixed?

[oss]

Hi

I can not reproduce any of this problem.

❯ curl -L -I 'http://opensubtitles.com'
HTTP/1.1 301 Moved Permanently
Date: Wed, 27 Nov 2024 12:53:29 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Wed, 27 Nov 2024 13:53:29 GMT
Location: https://opensubtitles.com/
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Wjo%2F3j7HRtlawz0SgN4DCXHYZFXgBARUcuYu6Os95u66lNnP0AvRxRd9tFJBRTgL8GCQ13tQ9gPgvMuUwRtaRCTZ820UB%2BPW04E7Vyj9Y4Jn8wCjboKopXq3hsUs6kWab98v8A%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
X-Content-Type-Options: nosniff
Server: cloudflare
CF-RAY: 8e9242e949fbc403-WAW
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=446798&min_rtt=446798&rtt_var=223399&sent=1&recv=3&lost=0&retrans=0&sent_bytes=0&recv_bytes=81&delivery_rate=0&cwnd=249&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"

HTTP/2 301
date: Wed, 27 Nov 2024 12:53:30 GMT
content-length: 0
location: https://www.opensubtitles.com/
x-varnish: 57563792
cache-control: public, max-age=86400
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4DzQfWe8aWf4JdcVh9AWRnqprsKod%2Bja3szn5N3jFrAdcQKUP8rpj5CGHPpCS9zCoX7ku825KJ%2BKSvZikhAh0kWWas4ZPc5tCjunXl9%2BQ7v2YaE1%2BkbYVEh2ibX%2B9d50Ofvjpw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8e9242eff81aecbb-WAW
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=320784&min_rtt=312550&rtt_var=78312&sent=9&recv=10&lost=0&retrans=0&sent_bytes=2905&recv_bytes=545&delivery_rate=12336&cwnd=252&unsent_bytes=0&cid=5e42e96eb2b22dac&ts=405&x=0"

HTTP/2 302
date: Wed, 27 Nov 2024 12:53:31 GMT
content-type: text/html; charset=utf-8
location: https://www.opensubtitles.com/en
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-download-options: noopen
x-permitted-cross-domain-policies: none
referrer-policy: strict-origin-when-cross-origin
cache-control: max-age=14400
content-security-policy: default-src 'self'; font-src 'self' fonts.googleapis.com code.cdn.mozilla.net https: data:; img-src 'self' image.tmdb.org m.media-amazon.com ia.media-imdb.com https: data:; object-src 'self' forum.opensubtitles.com; form-action 'self' forum.opensubtitles.com localhost:4200 www.opensubtitles.com; frame-src 'self' opensubtitles.stoplight.io *.opensubtitles.com opensubtitles.tawk.help forum.opensubtitles.com opensubtitles.test.onfastspring.com opensubtitles.onfastspring.com *.cloudfront.net api.blink.net *.tawk.to tawk.to test.blink.net blink.net www.recaptcha.net www.google.com www.youtube.com; connect-src 'self' srv.tunefindforfans.com region1.google-analytics.com bam.eu01.nr-data.net opensubtitles.test.onfastspring.com opensubtitles.onfastspring.com *.cloudfront.net rb-dev:8082 cana.local:8082 localhost:8082 *.test.resolver.perfops.net *.tawk.to wss://*.tawk.to cdn.datatables.net www.google-analytics.com test.blink.net api.blink.net blink.net www.gstatic.com *.blink.net api.test.blink.net https://cdn.datatables.net; base-uri 'self' test.blink.net api.blink.net blink.net *.blink.net; frame-ancestors 'self' forum.opensubtitles.com opensubtitles.onfastspring.com opensubtitles.test.onfastspring.com; script-src 'self' *.cloudfront.net bam.eu01.nr-data.net www.google.com cdn.datatables.net www.recaptcha.net www.google-analytics.com https: 'unsafe-inline' 'unsafe-eval'; style-src 'self' cdnjs.cloudflare.com https: 'unsafe-inline'
x-request-id: dda3c081-2cfe-4602-a6ff-223f3f97ab8b
x-runtime: 0.015318
x-stackifyid: V1|be79ed60-d78c-48ac-b347-78d1d7b51b1e|C98184|CD6
vary: Origin
x-cache-backend: rb2
x-var-cache: MISS
x-via: fw1
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FVG%2BopWmhPooG%2FdedIHDKBFy8EiJ%2FDfl1beQOa5wKpwd9h6Q0H0ylIIkZwA2Si9jga8N%2BnVC4%2FEHvwxRK5SAmF%2FoQZbHTy9hRSyDvaZjoNi8jvxAbOmvdFXvLy7ZmynhlksfiNfu48k%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; includeSubDomains; preload
server: cloudflare
cf-ray: 8e9242f6693ec005-WAW
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=315303&min_rtt=308966&rtt_var=74983&sent=8&recv=10&lost=0&retrans=0&sent_bytes=2906&recv_bytes=552&delivery_rate=12629&cwnd=235&unsent_bytes=0&cid=5d89b5203aaafcbe&ts=426&x=0"

HTTP/2 200
date: Wed, 27 Nov 2024 12:53:31 GMT
content-type: text/html; charset=utf-8
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-download-options: noopen
x-permitted-cross-domain-policies: none
referrer-policy: strict-origin-when-cross-origin
cache-control: private, max-age=14400, must-revalidate
content-security-policy: default-src 'self'; font-src 'self' fonts.googleapis.com code.cdn.mozilla.net https: data:; img-src 'self' image.tmdb.org m.media-amazon.com ia.media-imdb.com https: data:; object-src 'self' forum.opensubtitles.com; form-action 'self' forum.opensubtitles.com localhost:4200 www.opensubtitles.com; frame-src 'self' opensubtitles.stoplight.io *.opensubtitles.com opensubtitles.tawk.help forum.opensubtitles.com opensubtitles.test.onfastspring.com opensubtitles.onfastspring.com *.cloudfront.net api.blink.net *.tawk.to tawk.to test.blink.net blink.net www.recaptcha.net www.google.com www.youtube.com; connect-src 'self' srv.tunefindforfans.com region1.google-analytics.com bam.eu01.nr-data.net opensubtitles.test.onfastspring.com opensubtitles.onfastspring.com *.cloudfront.net rb-dev:8082 cana.local:8082 localhost:8082 *.test.resolver.perfops.net *.tawk.to wss://*.tawk.to cdn.datatables.net www.google-analytics.com test.blink.net api.blink.net blink.net www.gstatic.com *.blink.net api.test.blink.net https://cdn.datatables.net; base-uri 'self' test.blink.net api.blink.net blink.net *.blink.net; frame-ancestors 'self' forum.opensubtitles.com opensubtitles.onfastspring.com opensubtitles.test.onfastspring.com; script-src 'self' *.cloudfront.net bam.eu01.nr-data.net www.google.com cdn.datatables.net www.recaptcha.net www.google-analytics.com https: 'unsafe-inline' 'unsafe-eval'; style-src 'self' cdnjs.cloudflare.com https: 'unsafe-inline'
x-request-id: 3e4cb351-4279-480e-aace-80fd62387aab
x-runtime: 0.019477
x-cache-backend: rb10
vary: Origin, Accept-Encoding
age: 13787
x-var-cache: MISS
x-via: fw1
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fkaPG%2FWOiYYkzewBKbi1pNL6XQlqUjjBDl7QaOXfrtOO6UHXkT%2B9pkyc77gFnd5glRUrAxZ0e3sVnxkby9iEJGxrydHyKWjt%2B3%2FI0pqpyymkdOqnK9GbWjsdYJLxdz960r21an%2BCOrM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15552000; includeSubDomains; preload
server: cloudflare
cf-ray: 8e9242f8fc5fc005-WAW
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=317300&min_rtt=302430&rtt_var=31139&sent=16&recv=19&lost=0&retrans=0&sent_bytes=4973&recv_bytes=624&delivery_rate=13496&cwnd=239&unsent_bytes=0&cid=5d89b5203aaafcbe&ts=767&x=0"

can you send more debug data ?

https://www.ssllabs.com/ssltest/analyze ... Results=on

[swishly]

Thanks for the quick reaction. We can no longer observe the issue either - it looks like the certificates have been updated (expiration date is now February 19 '25, was of November 29 '24 at the time of the initial posting), and everything is working as normal now. Thank you!