How are certain websites able to override the specific exitnode you chose, and can a fix be made to stop it?

Question

I've followed the instructions in the posts about using a specific exitnode, and I've added the following to my torrc:

ExitNodes 719FD0FA327F3CCBCDA0D4EA74C15EA110338942
StrictNodes 1

As you can see, I've specified the exitnode by fingerprint rather than IP, which is 185.220.100.252

Now, this works fine when I go to http://www.duckduckgo.com or http://www.nasa.gov - I get that exact IP address. However, certain websites like https://ayefiles.com are somehow defeating this restriction, sending me to a different IP. This breaks my use case, where I need (for a short amount of time) all accesses through the same exitnode.

Is this a security hole I have discovered, and if so, can we close it so such sites cannot hack my choice of exitnode? Or, is it because StrictNodes 1 doesn't apply to ExitNodes and only ExcludeNodes? If this is the problem, can someone tell me how to specify the same restriction using ExcludeNodes? I.e. something like this:

ExcludeNodes !719FD0FA327F3CCBCDA0D4EA74C15EA110338942
StrictNodes 1

so I want to exclude all nodes BUT that specific fingerprint. Is there a syntax for this???

Thanks.

Answer 1

StrictNodes does not apply to ExitNodes. This is declared in the manual.

(StrictNodes applies to neither ExcludeExitNodes nor to ExitNodes).

Use MapAddress for doing that. Like this:

MapAddress ayefiles.com ayefiles.com.719FD0FA327F3CCBCDA0D4EA74C15EA110338942.exit