Websites Not Opening on Windows System [Redirecting]

Website, Application, Performance
1

3 of my website is redirecting to this suddenly from two days.

https://cdn.discordapp.com/attachments/1066359882619572263/1066388080283619468/GoogleUpdate.rar

After turning off clourflare from one of the site and pausing it it seems to be ok now. What is the issue with it?

2

You have some rule set to do this, check Audit Logs to see who and when were this set if you didn’t.

Change your password If you didn’t set those rules and then pass through all possible rules to see where they are set.

Do note this might be (and it’s more probable) on the server side, as well, so you might not see anything in Cloudflare.

3

Yes someone has set a redirect rule from Cloudflare. My account was accessed from somewhere in Russia.

4

@sayandutta29031995 Make sure to take these necessary steps:

5

Where was your redirect set? Page Rule?

Was it via the API or the dashboard?

6

Via Page Rule. I think it was via dashboard.

7

This issue was raised a while ago - we’re just awaiting Cloudflare response at this point. Have you heard anything from them directly by chance?

8

No not yet

9

You should have received a communication from Cloudflare about the incident - @sayandutta29031995

1 Like
10

I have the same issue

11

System info

IP addresses

104.21.65.83, 172.67.189.106, 2606:4700:3032::6815:4153, 2606:4700:3033::ac43:bd6a

CDN

Sucuri Security

Sucuri Security

SiteCheck is a website security scanner that checks any link or URL for malware, viruses, blocklist status, or malicious code. Check your website safety for free with Sucuri.

Sucuri Security

Sucuri Security

SiteCheck is a website security scanner that checks any link or URL for malware, viruses, blocklist status, or malicious code. Check your website safety for free with Sucuri.

Sucuri Security

Sucuri Security

SiteCheck is a website security scanner that checks any link or URL for malware, viruses, blocklist status, or malicious code. Check your website safety for free with Sucuri.

Cloudflare

TLS Certificate

Issued by Cloudflare, Inc.

Redirects

Redirects to
REDACTED

apparently its a phishing malware that is affecting

how do i remove it ?
pls click menu and let me know if you see any redirects?
https://supercars.agent4stars.com/search-results-2/

13

Apr 14, 2023

Email custom address create

[email protected]

agent4stars.com
Apr 14, 2023

Email destination create

[email protected]

Account
Apr 8, 2023

Rulesets update

[email protected]

villamarbella.co
Apr 8, 2023

Rulesets update

[email protected]

the-billionaires-club.com
Apr 8, 2023

Rulesets update

[email protected]

agent4stars.com
Mar 26, 2023

Rulesets create

[email protected]

villamarbella.co
Mar 26, 2023

Rulesets create

[email protected]

the-billionaires-club.com
Mar 26, 2023

Rulesets create

[email protected]

agent4stars.com

HOW DO i erase these Rulesets, not made by myself ?

15

Review the audit log

To access audit logs in the Cloudflare dashboard:

  1. Log in to the Cloudflare dashboardOpen external link and select your account.
  2. Go to Manage Account > Audit Log.

If you notice any settings were changed, you should undo those changes.
HOW?

16

ok i managed to go to each pages RULES and remove the REDIRECTS …how did a hacker get access to my account ? Now i changed password and have 2 factor protection, hope this issue will not repeat

17

The most common form of account compromises are reused credentials across other sites that may have had breaches or data leaks. Be sure you’re not reusing passwords anywhere. I’d recommend following this doc for best practices to secure your account:

2 Likes