Hack, Malware or?

#1

I find the following very strange and I would like your opinion on this:

  1. Few months ago I registered a domain name and set the Cloudflare DNS, but I never add it to CF.

  2. Today, By chance I entered the domain in a browser and notice this page:

  1. Then I activate it in CF, and the CF DNS recognized two records that pointed to the IP 5.45.70.31 that I had never established.

Any idea what could happen?

1 Like

#2

Someone noticed you had abandoned that domain, so they set it up at Cloudflare. Go to your domain registrar and set the name server(s) to something else. Registrars usually have their own name servers, so that would be a safe approach.

3 Likes