Web396 is under a DDOS attack and its main IP (18.104.22.168) is currently null-routed.
We have set-up some proxy servers in front of Web396 and have emailed all customers to tell them to point their sites to the proxies.
Sites that are pointing to the proxies appear to be working fine.
We will update this post once the attack has subsided.
Update July 22th, 18:06 UTC: We have identified the target of the attack and have moved to to separate servers. At this point the attack on Web396 appears to be over and we have updated our DNS servers to point all the domains back to Web396. If you’re using external DNS servers you will need to update them to point your domains back to Web396