DNS Record was Changed need Hacking Advice

I got an email last night saying our DNS was modifieded.

A TXT Record was added

There is nothing in the cloudflare audit logs that suggest someone logged in.

Also, I spoke to my hosting provided at siteground who said that is was done on the Cloudflare side.

The Records are :

AAAA 2606:4700:3032::ac43:df50

We were hacked last year by a phishing scam where our site was re directed Im trying to avoid this now, any help will be greatly appreciated. Thanks!

It’s ok.

That’s a new Cloudflare subnet in addition to the usual 104.xx.xx.xx IP addresses.

Even then…there are rare occasions when the 104 addresses for your domain can change. But at least you’ve got some monitoring and will know when that happens.


Thanks! Little weight off the shoulders. Have a nice wkd.

1 Like

This topic was automatically closed after 30 days. New replies are no longer allowed.