3 of my website is redirecting to this suddenly from two days.
https://cdn.discordapp.com/attachments/1066359882619572263/1066388080283619468/GoogleUpdate.rar
After turning off clourflare from one of the site and pausing it it seems to be ok now. What is the issue with it?
You have some rule set to do this, check Audit Logs to see who and when were this set if you didn’t.
Change your password If you didn’t set those rules and then pass through all possible rules to see where they are set.
Do note this might be (and it’s more probable) on the server side, as well, so you might not see anything in Cloudflare.
Yes someone has set a redirect rule from Cloudflare. My account was accessed from somewhere in Russia.
Where was your redirect set? Page Rule?
Was it via the API or the dashboard?
Via Page Rule. I think it was via dashboard.
This issue was raised a while ago - we’re just awaiting Cloudflare response at this point. Have you heard anything from them directly by chance?
No not yet
You should have received a communication from Cloudflare about the incident - @sayandutta29031995
I have the same issue
IP addresses
104.21.65.83, 172.67.189.106, 2606:4700:3032::6815:4153, 2606:4700:3033::ac43:bd6a
CDN
SiteCheck is a website security scanner that checks any link or URL for malware, viruses, blocklist status, or malicious code. Check your website safety for free with Sucuri.
SiteCheck is a website security scanner that checks any link or URL for malware, viruses, blocklist status, or malicious code. Check your website safety for free with Sucuri.
SiteCheck is a website security scanner that checks any link or URL for malware, viruses, blocklist status, or malicious code. Check your website safety for free with Sucuri.
Cloudflare
TLS Certificate
Issued by Cloudflare, Inc.
Redirects to
REDACTED
apparently its a phishing malware that is affecting
how do i remove it ?
pls click menu and let me know if you see any redirects?
https://supercars.agent4stars.com/search-results-2/
Apr 14, 2023
Email custom address create
agent4stars.com
Apr 14, 2023
Email destination create
Account
Apr 8, 2023
Rulesets update
villamarbella.co
Apr 8, 2023
Rulesets update
the-billionaires-club.com
Apr 8, 2023
Rulesets update
agent4stars.com
Mar 26, 2023
Rulesets create
villamarbella.co
Mar 26, 2023
Rulesets create
the-billionaires-club.com
Mar 26, 2023
Rulesets create
HOW DO i erase these Rulesets, not made by myself ?
To access audit logs in the Cloudflare dashboard:
If you notice any settings were changed, you should undo those changes.
HOW?
ok i managed to go to each pages RULES and remove the REDIRECTS …how did a hacker get access to my account ? Now i changed password and have 2 factor protection, hope this issue will not repeat
The most common form of account compromises are reused credentials across other sites that may have had breaches or data leaks. Be sure you’re not reusing passwords anywhere. I’d recommend following this doc for best practices to secure your account:
Thank you !!! That helped… I have been stuck for 2 weeks like and finally with your help i was able to resolve my issue!
Have a blessed day!
