Public URL’s for exposing your webserver / free port forwarding
These are also apparently tunneling services frequently used by attackers to evade defences.
The problem I faced was that sending unverified requests failed, as elastalert didn’t allow
I searched the Elastalert code and found the place the request is being made, it is in
alerts.py file, the class
response = requests.post( url, data=json.dumps(payload, cls=DateTimeEncoder), headers=headers, proxies=proxies, timeout=self.timeout )
response = requests.post( url, data=json.dumps(payload, cls=DateTimeEncoder), headers=headers, proxies=proxies, timeout=self.timeout, verify=False )
You will still get an insecure request warning, but the request is sent.
If you are using the Praeco docker containers, then you can use this post to figure out which version of the code to change.
Remember to first go into the container:
docker exec -it praeco_elastalert_1 sh
Outside of test function, the http post does not work.
In the alert log on the praeco frontend the slack alert shows, but the http post does not.
In the application logs the following error is shown:
ProcessController: ERROR:root:Error while running alert http_post: Error posting HTTP Post alert: HTTPSConnectionPool(host='api.voxcloud.co.za', port=443): Max retries exceeded with url: /st2/api/v1/webhooks/praeco (Caused by SSLError(SSLError("bad handshake: Error([('SSL routines', 'tls_process_server_certificate', 'certificate verify failed')],)",),))
I had to restart the containers, docker container stop and start for it to read the updated files.
TLDR; Topgrades.co.za is no longer a member of Rand Refinery, their membership has been suspended. Take a look at all rand refinery registered dealers and make sure to only buy from people on this list
Investing in gold you can actually hold can be a very prudent investment espescially when global debt continues to rise and money is being created through this debt. However buying real gold that you can hold is the only way to be sure that you actually own gold. Merely buying gold shares or a Gold ETF will mean nothing in a global financial collapse. It is important to read the fine print of the contracts if you do prefer paper gold.
Nonetheless getting actual Kruger Rands can be tough because they are of high value and with high value comes risk. Certainly there will be a scammer for every legitimate coin dealer.
I had dealt with Centuarus Trading by buying through their topgrades.co.za website before and didn’t have much of an issue except that the order did take quite long to be fulfilled. This was in mid 2017. I had checked and they were a registered dealer.
A month ago I made another purchase, however this time it took 2 weeks without contact. I had to call the owner of Centaurus and ask him what was going on and he gave me the run around.
I then called Rand Refinery and was told that their membership was being reviewed after I noticed they were no longer on the registered coin dealers list. The next week I called Rand Refinery again and they told me that management had decided to suspend their account and I was to ask for a refund.
I asked for a refund and again a bit of a run around. It was not processed immediately I was told to wait 48 hours and then again for the following day.
The whole ordeal took 28 daysf from the day I EFT’ed into their account until I received the refund. Unfortunately it has left a bitter taste in my mouth and a dent in my growth prospects as Gold has rallied about R500 since the time of purchase.
When you are dealing with relatively large transactions it is important that everyone feels safe and secure but in this case I was worried by the shady activity and that it could be a scam.
At the end of the day it all worked out ok but I want to warn other people to avoid dealing with the following companies when it comes to Kruger Rands (Gold Bullion):
Also always ensure you test the authneticity of KrugerRands using the methods descrobe in the Rand Refinery Testing Guide.
You can contact the owner Paul Blundell Gibson on 0835026312.
Chantelle Pretorious also works for the company.