Phishing malware 301 redirection on domain

Website, Application, Performance Security
1

My Domain

weightloss4ladies.us

domain redirects to 'cdn.discordapp.com/attachments/1086754890530947094/1089146480851439736/NewBrowsers.rar'

abnormal redirection

Have you tried from another browser and/or incognito mode?
yes
Please attach a screenshot of the error:

3

Welcome to the Cloudflare Community. :logodrop:

I’m sorry to hear about your compromised Cloudflare account. You will need to secure your account and remove all malicious changes to your configuration.

3 Likes
4

thanks friend for the feedback i tried all steps but unable to fix it
i change my password and added two factor authentication
reset Global api key
reset Origin CA Key
No API tokens is defined under my account should i create it?
i checked also session but its just showing my current session

Any help would be greatly appreciated
thanks

5

No.

You need to remove the redirect rules that were added. Step 5 - Review the audit log may help you find them. You can also just examine the rules in your site and remove any that aren’t yours.

1 Like
6

i removed rules but still my domain still redirects to https://cdn.discordapp.com/attachments/1086754890530947094/1089146480851439736/NewBrowsers.rar
i found these rules

pagerules
pagerules973×376 18.2 KB

so i removed them
but still domain redirects to discordapp
any suggestions?

8

None of those were redirect rules. You may want to remove the malicious redirect that was created by the attacker.

2 Likes
9

Thanks friend respect. it worked i found malicious redirect rule for my domain thanks for pointing me in right direction it was single redirect rule

2 Likes
10

This topic was automatically closed 3 days after the last reply. New replies are no longer allowed.