Domain Hijacked

Good evening…

I’m not sure where to post this so hopefully someone will help me out and move it to the right spot.

A domain I own has been hijacked and now appears to redirect to an eBay UK page.

I own .com, .net and .org for the same name. The .org, which I don’t use for anything, is the one that’s been hijacked. It’s hosted on 1and1.com, but with Cloudflare name servers.

Clearly, I’d like to get it back and have it redirect to my main domain.

Advice?

Thanks in advance.

Neil R.

You’ll need to contact your registrar to modify name servers and a good idea to change your password at the same time. What is the domain?

1 Like

Neilreisner.org

The domain I use is neilreisner.com.

Not clear what you mean by modify my name servers. They’re already set to Cloudflare name servers.

Will change passwords, he said, slapping his forehead because it’s so obvious he should do that.

:wink:

– n

In your Cloudflare Dashboard, select neilreisner.org, the DNS tab, scroll to the bottom and verify Cloudflare Nameservers are alla.ns.Cloudflare.com chuck.ns.Cloudflare.com.
If those are correct NS, go to the Page Rules tab and check to see if a Page Rule is redirecting your site to that other page.
Let us know if there are no Page Rules or if the Name Servers under your DNS tab are different.

Nameservers are all good, and there are no Page Rules.

Through my 1and1 dashboard, I did try to redirect it to neilreisner.com, but that didn’t work.

  • n

The DNS Records page shows that neilreisner.org points to 185.63.253.131. When I go to that page, I get a “403 Forbidden” error message.

Don’t know if that’s relevant, but figured I should tell you.

– n

185.63.253.131 is a *domain in Amsterdam.

Yes, it is. No idea how it ended up having anything to do with me.
What do I have to change?

Should I put the IP address listed for my .com domain?

1 Like

I’m assuming that it’s an \A record pointing to that other site and if it is, then I would point your parked .org domain to the same IP as your your .com domain.

Just chiming in that it works for me from sunny Australia, if that helps.

https://neilreisner.com/ goes to ‘Neil Reisner’s Place’, and https://www.neilreisner.com/ redirects to https://neilreisner.com/ which looks like what you’d probably expect?

This topic was automatically closed after 14 days. New replies are no longer allowed.