I've recently been doing some research on pentesting websites through metasploit. Now I've run into a problem that I'm sure is pretty common but I cant seem to find anything else about it on stackexchange.
Say that I am trying to access pentest.com through metasploit and that website is hosted on a service like Cloudfare. Lets say that Cloudfare also hosts johnsbaking.com on the same server. pentest.com and johnsbaking will share the same IP - which would mean that connecting to the IP adress would not actually access the needed website.
So it would seem that the different websites are accessed through different ports(or maybe not?)...but how would one tell which port is being used for which website? Keep in mind that cloudfare does not allow access to a website through ip adress and port in a browser.