DNS records missing

#1

Hi, I believe a hacker deleted some DNS records on my server so I need to know what basic records are needed to make everything work correctly. Currently, if I turn on cloudflare site becomes not accessible. I have to disable cloudflare then site loads. Cloudflare will not even do a automatic scan of site. When I removed site and deleted all record to do a scan.

The reason I know some records got deleted is because I remember some of them like MX records that no longer exist. My host is real busy so it will take a week or more before he gets to me. The server is apache. And I work through Cpanel. If it’s easier, you can screen shot it and post it. Or leave a link. I don’t like my site not having any security.

|cPanel Version|82.0 (build 17)|
|Apache Version|2.4.41|
|PHP Version|5.6.40|
|MySQL Version|10.0.38-MariaDB|
|Architecture|x86_64|
|Operating System|linux|
|Perl Version|5.10.1|
|Kernel Version|2.6.32-642.13.1.el6.x86_64|

#2

The DNS records at Cloudflare should match the DNS records at your host. If turning off Cloudflare makes your site work, then your missing DNS records exist at your host.

#3

Here’s a DNS scanner and what it says.
https://mxtoolbox.com/domain/yecheadquarters.org/

#4

Yes, I know that it’s not a cloudflare problem. I just need to know what records I should have as a basic rule and I can figure out the rest later.

Added: On my server so my site works correctly. Then I resetup cloudflare to rescan it.

#5

I cancelled cloudflare because I see no need to pay for all this until my site is back up and working. And seems like everything works against me. it always takes several days or weeks because I usually end up trying to figure out server stuff when I mainly only know website stuff. I tried to google it but I really got nothing, So I don;t know if anyone can even help me.

#6

I forgot I had been working on another website on the same server several months ago. So I logged in and did a comparison of records. There were 4 extra record and 1 missing mx record. The only extra record I deleted was one that had suspicious coding in it. I left the other extra records they were cnames. And they did not look suspicious.

So after the fix, it still does not work. If you need me to turn on cloudflare so you can see what’s going on I will But it’s a 522 error with a pic that show the host server not working aka red X. But if I disable cloudflare totally, it takes about 5 minutes. But site begins to load again.

I told my how to check security events to see if one is being tripped and if so turn it off. Now I have reinstalled wordpress from scratch, and with the basic install test this and it still does it. As to why I believe it’s on a server level not a website level.

My site has been hacked 20 times since the first of the year. Is there anyway they did something to cloudflare, and that maybe a account delete and reset up might fix?

#7

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.