Hacked Site

Someone has hacked my old VPS, but after moving to a new one (using Linux instead of Windows) and purging the Cloudflare cache, some people still experience a virus when visiting it. It seems that this issue is due to the domain being still connected to my old VPS which got hacked, but I reset all the DNS records yesterday (it’s been about 30 hours) so I’m confused as to why the domain is still connected to the old VPS’s IP.

; <<>> DiG 9.16.1-Ubuntu <<>> anify.club
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 29896
;; flags: qr rd ad; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 0
;; WARNING: recursion requested but not available

;; QUESTION SECTION:
;anify.club.                    IN      A

;; ANSWER SECTION:
anify.club.             0       IN      A       NEW_IP_HERE
anify.club.             0       IN      A       OLD_IP_HERE

;; Query time: 120 msec
;; SERVER: OLD_IP_HERE#53(OLD_IP_HERE)
;; WHEN: Wed Jan 18 18:00:34 PST 2023
;; MSG SIZE  rcvd: 70


Any ideas?

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.