Discovery of Unexpected Subdomains Indexed in Google Linked to My Cloudflare IP Address

Dear Cloudflare Support Team,

I am writing to bring to your attention a concerning issue I have recently discovered regarding unexpected subdomains that have been indexed in Google, all of which are associated with my Cloudflare IP address. I would like to clarify that I did not create any records for these subdomains either in my Cloudflare account or on my server.

Here is a list of the subdomains in question:

  3. 404 Not Found
  4. 404 Not Found
  5. 404 Not Found

and many more.

These subdomains are not associated with any content or services that I have authorized or intended to create. It appears that these subdomains have been indexed by search engines, specifically Google, and are now publicly accessible. This situation raises significant security and privacy concerns for me.

I kindly request your immediate assistance in investigating this matter and resolving the issue. I understand that Cloudflare takes security seriously and has robust measures in place to protect its users’ accounts and data. Therefore, I trust that you will thoroughly investigate this incident to identify the cause and help me mitigate any potential risks associated with these unauthorized subdomains.

Please provide me with any information or steps I should take to secure my Cloudflare account and ensure that these subdomains are removed from Google’s index. I am committed to cooperating fully and promptly to rectify this situation.

Can you share a screenshot of your Cloudflare DNS dashboard?

Seeing as also leads to the same 404 page, I would assume that you have created a Wildcard record with the name * (or just * in the dashboard).

If you don’t want random names to be accessible, you’d need to remove the wildcard and add the specific names such as www by hand or redirect people to your correct page instead of showing a 404.

Also have a look at Google - Control What You Share to see how to remove the indexed hostnames.


This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.