My domain's DNS IP is being changed by itself to a malicious IP

I’ve been having this problem for a few days now and I don’t know what to do anymore. simply every “x” time when I access my main domain, it redirects to a different page. When I check Cloudflare, in DNS, the pointing IP was changed to a malicious IP. I have 2fa active, new password modified and I still don’t know how they manage to change the DNS IP.

Check to see how and when changes are being made in your audit log…
https://dash.cloudflare.com/?to=/:account/audit-log

If you think the changes are unauthorised, make sure you rotate your global API key and check for any API tokens that you didn’t create or have been modified.

This topic was automatically closed 2 days after the last reply. New replies are no longer allowed.