Malicious script injection on HTTPS via Cloudflare

What is the name of the domain?

americadelsurtours.com

What is the error message?

Malicious script injection on HTTPS via Cloudflare. The script loads from data-seed-prebsc-1-s1.bnbchain.org but is not present on the server or in HTTP responses. Issue occurs only on HTTPS. Possible Cloudflare compromise—please investigate.

What is the issue you’re encountering

Malicious script injection on HTTPS via Cloudflare. The script loads from data-seed-prebsc-1-s1.bnbchain.org but is not present on the server or in HTTP responses. Issue occurs only on HTTPS. Possible Cloudflare compromise—please investigate.

What is the current SSL/TLS setting?

Full (strict)

What are the steps to reproduce the issue?

Go to https://americadelsurtours.com

Screenshot of the error