My domain name is being hijacked

It’s like Deja Vu all over again. I recently reported that one of my domain names were being hijacked another user at Cloudflare. And today I’ve noticed the same thing for a different domain name (sagacityhq.com). I added this domain name to Cloudflare a few months back but then removed it. The nameservers assigned to me were art.ns.Cloudflare.com and dina.ns.Cloudflare.com, and I forgot to change them at my registrar.
Now I see some torrent website running on my domain name, served by Cloudflare.
My question is, how did someone else verify my domain name for their account AGAIN?
It seems to me that this is clearly a bug/security problem with Cloudflare, that should have been fixed a long time ago.
cc @cloonan

There’s your problem. This isn’t unique to Cloudflare. It will happen to anybody at any hosting who deletes their site without changing the name servers. Someone who has the same name servers can add your domain under their account.

Change your name servers and the problem will go away.

4 Likes

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.