I turned off, disabled, uninstalled Cloudlflare and now it redirects my website to an illegal movie streaming site.
Bluehost said that I must contact Cloudflare and tell them to redirect the nameserver back to Bluehost. But I can’t find any way to contact them. This REALLY SUCKS. I’m losing money every day it’s offline.
I sent a support ticket but that was many hours ago and still no reply.
What is your domain name?
Who is your domain registrar? If you want to point the nameservers to Bluehost, you should change it there.
Your registrar appears to be fastdomain.com, if you want to point the nameservers back to Bluehost, you should do so there.
If you want to stay on Cloudflare and update that A record, please see:
I do not want to stay on Cloudflare. Nothing but problems. Thank you for the help. I sent all this to Bluehost to help explain what it means. I’m illiterate with this stuff.
They just said this after pointing to this thread. “In order change that you need to contact cloud flare as nameserver is pointing to Cloudflare.”
So I need to contact Cloudflare to make my website work again?
If you don’t want to stay with Cloudflare, just change your nameservers with fastdomain.com to point to the Bluehost ones. Cloudflare don’t need to be contacted normally.
That’s weird because I swear I’ve never used fastdomain before. No idea why I would. I’ve been with Bluehost for many years.
I tried “I forgot my password” and I’ve never before registered with fast domain.
Bluhost support just said this when I asked them to do it:
“Since currently nameservers are pointing to Cloudflare we do not have access to change the nameserver.”
Argh.
It is the registrar that has the power to change the nameservers, not where they are pointing!
Unless the domain is on Cloudflare registrar (which whois says is isn’t), there isn’t really anything that Cloudflare can do …
I don’t understand how fastdomain became the registrar if I never changed it from Bluehost? Was I hacked?
Hi @endlessability, the suggestion from @domjh is spot-on. Your domain registrar holds the keys to updating your name servers. I’m not sure the detail of what happened but it appears someone is attempting to capture your domain. For several years the name servers were:
norm.ns.Cloudflare.com
maria.ns.Cloudflare.com
Presumably these were changed to the above by you. When you “turned off, disabled, uninstalled” Cloudflare, you did so on the dashboard? If so, did you leave the name servers pointing to norm & maria? It appears someone else added the domain as they are now responding with:
$ dig ns absoluteability.com +short
coby.ns.Cloudflare.com.
eva.ns.Cloudflare.com.
Ultimately, you need to find the domain registrar, they hold the key to changing name servers.
So someone has stolen my website?
Registrant Contact
Name: DOMAIN PRIVACY SERVICE FBO REGISTRANT
Organization: THE ENDURANCE INTERNATIONAL GROUP, INC.
Mailing Address: 10 CORPORATE DR, STE 300, BURLINGTON MASSACHUSETTS 01803 US
Phone: +1.8017659400
Ext:
Fax:
Fax Ext:
Email:[email protected]
I don’t understand what is happening
So when I turned off Cloudflare someone stole my domain?
No but who is THE ENDURANCE INTERNATIONAL GROUP, INC.?
*One of their brands is Bluehost Home | Newfold Digital
Hi @endlessability, perhaps more a heist in process. I redacted some of the details you shared, but thank you for the information. It appears fastdomain was the registrar but I don’t know if there is a relationship with fastdomain and bluehost (I’ve not done business with either of them).
One option is to login to your Cloudflare account and select +Add domain to add the zone to Cloudflare again? You’ll be assigned the same name servers of norm & maria. Whois is showing norm & maria as the servers and that is where we’ll look to verify the domain. After that, go to the DNS tab and update the A record to point to the .53 IP address using the info @domjh shared.
Here is the raw WHOIS. Shows it’s been edited today and everything seems to point back to Bluehost/fastdomains
Raw WHOIS Record
Domain Name: ABSOLUTEABILITY.COM
Registry Domain ID: 1615042650_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.bluehost.com
Registrar URL: http://www.bluehost.com/
Updated Date: 2019-03-13T16:07:28Z
Creation Date: 2010-09-09T19:38:18Z
Registrar Registration Expiration Date: 2019-09-09T19:38:18Z
Registrar: FastDomain Inc.
Registrar IANA ID: 1154
Registrar Abuse Contact Email: [email protected]
Registrar Abuse Contact Phone: +1.8017659400
Reseller: BlueHost.Com
Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
Registry Registrant ID:
Registrant Name: DOMAIN PRIVACY SERVICE FBO REGISTRANT
Registrant Organization: THE ENDURANCE INTERNATIONAL GROUP, INC.
Registrant Street: 10 CORPORATE DR, STE 300
Registrant City: BURLINGTON
Registrant State/Province: MASSACHUSETTS
Registrant Postal Code: 01803
Registrant Country: US
Registrant Phone: +1.8017659400
Registrant Phone Ext:
Registrant Fax:
Registrant Fax Ext:
Registrant Email: [email protected]
Registry Admin ID:
Admin Name: DOMAIN PRIVACY SERVICE FBO REGISTRANT
Admin Organization: THE ENDURANCE INTERNATIONAL GROUP, INC.
Admin Street: 10 CORPORATE DR, STE 300
Admin City: BURLINGTON
Admin State/Province: MASSACHUSETTS
Admin Postal Code: 01803
Admin Country: US
Admin Phone: +1.8017659400
Admin Phone Ext:
Admin Fax:
Admin Fax Ext:
Admin Email: [email protected]
Registry Tech ID:
Tech Name: DOMAIN PRIVACY SERVICE FBO REGISTRANT
Tech Organization: THE ENDURANCE INTERNATIONAL GROUP, INC.
Tech Street: 10 CORPORATE DR, STE 300
Tech City: BURLINGTON
Tech State/Province: MASSACHUSETTS
Tech Postal Code: 01803
Tech Country: US
Tech Phone: +1.8017659400
Tech Phone Ext:
Tech Fax:
Tech Fax Ext:
Tech Email: [email protected]
Name Server: NS1.BLUEHOST.COM
Name Server: NS2.BLUEHOST.COM
DNSSEC: unsigned
URL of the ICANN WHOIS Data Problem Reporting System: http://wdprs.internic.net/
Last update of WHOIS database: 2019-03-13T16:07:28Z <<<
For more information on Whois status codes, please visit EPP Status Codes | What Do They Mean, and Why Should I Know? - ICANN
The data in the BlueHost.Com WHOIS database is provided
to you by BlueHost.Com for information purposes only,
that is, to assist you in obtaining information about or related to
a domain name registration record. BlueHost.Com makes
this information available “as is,” and does not guarantee its
accuracy. By submitting a WHOIS query, you agree that you will use
this data only for lawful purposes and that, under no circumstances
will you use this data to: (1) allow, enable, or otherwise support
the transmission of mass unsolicited, commercial advertising or
solicitations via direct mail, electronic mail, or by telephone; or
(2) enable high volume, automated, electronic processes that apply
to BlueHost.Com (or its systems). The compilation,
repackaging, dissemination or other use of this data is expressly
prohibited without the prior written consent of
BlueHost.Com. BlueHost.Com reserves the
right to modify these terms at any time. By submitting this query,
you agree to abide by these terms.
UNLIMITED storage, bandwidth and domains on one account. Also receive a FREE domain for one year when you host with http://www.bluehost.com/