Cloudflare & DNS compromises

Feature Spotlight: Shared & Reseller Hosting – Part 1
June 18, 2017
Show all

Cloudflare & DNS compromises

Its been a long time since I wanted to start our official blog but it was always something being delayed, well finally the blog is here and we’re here with our first post!

I’m sure that this blog post will sound familiar to a lot of you that have experienced this issue and will hopefully help so that the number of cases where people experience this issue is reduced.

A lot of our members sometimes will register a new domain and point the nameservers of the domain to Cloudflare but we may delay adding it to our Cloudflare account or sometimes we may even have it set with our domain registrar that all new domains we register should point automatically to our Cloudflare nameserver set.

A member submitted a ticket recently saying that he registered a number of domains in the last weeks and a few where surprisingly loading sites and they definitely were not his own sites. Over the past year we have received a number of tickets describing the same issue.

In basic what occurs is that users with malicious intentions monitor new domain registrations and they monitor domains that are pointed to Cloudflare but not yet added in any Cloudflare account. (note: anyone can monitor new domain registrations, there are many companies providing this is a service)

When a domain is pointed to a set of Cloudflare nameservers but the the domain is not added in any Cloudflare account it basically means that anyone with a Cloudflare account can add the domain to their own Cloudflare account and Cloudflare will re-point the domain automatically internally to their own set of nameservers.

Users with malicious intent monitor that and they will automatically add them into their own Cloudflare accounts and benefit from free domains without the domain owner necessarily knowing about it since they wouldn’t be notified in any way that this is occurring – not only are these users benefiting from free domains but they could cause a permanent damage to the domain name as these users will 99% of the times host fraudulent sites – most domain registrars monitor this and will suspend the domain, not only this but you could receive a permanent penalty by Google and other search engines since they will see that the site is hosting a fraudulent site which in a SEO point of view its bad.

This same thing can happen with any hosting provider that has their own DNS servers, for example if a domain is pointed to our nameservers but the domain isn’t added in a hosting account – any customer with malicious intentions using our services can add the domain in their account.

How do I know if i’m affected?

That is a good question and a very important one!

Lets assume I purchased a domain mynewdomain.com on November 30th 2016 and I pointed the domain to my set of Cloudflare nameservers:

jack.ns.cloudflare.com
jill.ns.cloudflare.com

So up to now the only action I took was to register the domain and point it to my Cloudflare nameservers, I haven’t added the site on my server yet.

The first way you can understand that something is going wrong is when you try to load this newly registered site and it loads some site that you don’t own and is completely unrelated to you.

In this case my first step would be to go to a DNS checker such as http://leafdns.com – I would type my domain name in the field on that page and click on the “Go” button. It will then load the results of the DNS check we executed

Now have a look at what the parent nameservers and local nameservers sections are reporting, the nameservers in both of those sections should match up so in our case they should both report:

jack.ns.cloudflare.com
jill.ns.cloudflare.com

If the local nameservers section is reporting a different set of nameservers then it means that a user with malicious intentions has added the domain in their own Cloudflare account and is taking advantage of it to host his fraudulent site.

The Resolution

The resolution for this issue is to point the nameservers back to the default DNS of your domain registrar so that it shows their default parking page and wait 2-3 days (usually I personally recommend 7 days) so that Cloudflare detects that the nameservers no longer points to them and automatically removes the domain from the Cloudflare account it was added at and then you would point the domain back to your own Cloudflare nameservers and add it to your Cloudflare account.

I actually usually recommend either pointing the the domain to your set of Cloudflare nameservers and then immediately adding the domain in your Cloudflare account once you are ready to build the site or even better if possible first adding the domain in your Cloudflare account and then pointing the domain to your set of Cloudflare nameservers.

I hope that this has been useful for you! For any questions do feel free to leave a comment and i’ll answer them!

3 Comments

  1. Roger Gonzales says:

    Thank you very much, this will be very helpful, specially when we buy bulk domains.

  2. Ganti says:

    Thank you very much

  3. Anurag says:

    Thank you very much.

    I am dealing with this now. I know what mistake I did, lesson learned!!

  4. ErnestoLem says:
    Your comment is awaiting moderation. This is a preview, your comment will be visible after it has been approved.

    Nicely put, With thanks.

    is viagra better than cialis viagra super active sildenafil
    generic viagra 100mg
    how much viagra to take – https://genericviagramsl.com

    KeithVon
    Richardbus
    ErnestoLem

  5. ErnestoLem says:
    Your comment is awaiting moderation. This is a preview, your comment will be visible after it has been approved.

    You have made your point pretty well.!

    female ingestion of viagra viagra stories and pics
    viagra for sale uk
    blueberry like viagra – https://genericviagrantx.com

    KeithVon
    Richardbus
    ErnestoLem

  6. ErnestoLem says:
    Your comment is awaiting moderation. This is a preview, your comment will be visible after it has been approved.

    You have made your point.

    viagra sex porn and viagra
    viagra for women
    purchasing viagra – https://genericviagrantx.com

    KeithVon
    Richardbus
    ErnestoLem

  7. ErnestoLem says:
    Your comment is awaiting moderation. This is a preview, your comment will be visible after it has been approved.

    Wonderful material. Many thanks.

    naming viagra personal experience using viagra
    cheap viagra
    blue tint viagra – https://genericviagrarcp.com

    KeithVon
    Richardbus
    ErnestoLem

  8. ErnestoLem says:
    Your comment is awaiting moderation. This is a preview, your comment will be visible after it has been approved.

    With thanks! Terrific information!

    light sensitivity with viagra viagra motorcycle
    viagra generic
    viagra side effacts – https://genericviagrarcp.com

    KeithVon
    Richardbus
    ErnestoLem

  9. ErnestoLem says:
    Your comment is awaiting moderation. This is a preview, your comment will be visible after it has been approved.

    Nicely put, Many thanks.

    viagra free sample new zealand will viagra lower your blood pressure
    buy viagra
    generic sildenafil viagra – https://genericviagrarcp.com

    KeithVon
    Richardbus
    ErnestoLem

  10. ErnestoLem says:
    Your comment is awaiting moderation. This is a preview, your comment will be visible after it has been approved.

    You’ve made your point!

    levitra viagra price facts viagra tylenol
    viagra online
    viagra use in women – https://genericviagrantx.com

    KeithVon
    Richardbus
    ErnestoLem

  11. ErnestoLem says:
    Your comment is awaiting moderation. This is a preview, your comment will be visible after it has been approved.

    You said it adequately.

    regalis comparison levitra viagra viagra blood pressure
    viagra pills
    cialis new viagra – https://genericviagrantx.com

    KeithVon
    Richardbus
    ErnestoLem

  12. ErnestoLem says:
    Your comment is awaiting moderation. This is a preview, your comment will be visible after it has been approved.

    Good stuff. Many thanks.

    ejaculation with viagra viagra pointer cursor
    viagra pills
    keyword viagra prescription – https://genericviagrarcp.com

    KeithVon
    Richardbus
    ErnestoLem

  13. ErnestoLem says:
    Your comment is awaiting moderation. This is a preview, your comment will be visible after it has been approved.

    Seriously tons of superb information.

    lowest price viagra wal mart viagra order canada
    viagra without a doctor prescription
    viagra cialis espa ol – https://genericviagrarcp.com

    KeithVon
    Richardbus
    ErnestoLem

  14. ErnestoLem says:
    Your comment is awaiting moderation. This is a preview, your comment will be visible after it has been approved.

    You said it adequately.!

    viagra causing macular degeneration damaged by viagra
    viagra for sale uk
    viagra effect after urination – https://genericviagrarcp.com

    KeithVon
    Richardbus
    ErnestoLem

  15. ErnestoLem says:
    Your comment is awaiting moderation. This is a preview, your comment will be visible after it has been approved.

    Terrific posts. With thanks.

    viagra agonists does viagra help for multiple orgasms
    viagra for sale uk
    order viagra online consumer rx – https://genericviagramsl.com

    KeithVon
    Richardbus
    ErnestoLem

  16. ErnestoLem says:
    Your comment is awaiting moderation. This is a preview, your comment will be visible after it has been approved.

    Kudos. I like this.

    find viagra edinburgh search pages buying deal pill viagra
    viagra generic
    best place to get viagra – https://genericviagrarcp.com

    KeithVon
    Richardbus
    ErnestoLem

  17. ErnestoLem says:
    Your comment is awaiting moderation. This is a preview, your comment will be visible after it has been approved.

    Incredible tons of terrific tips!

    viagra in the water mp3 kaboom answer to viagra
    generic viagra 100mg
    trial prescriptions of viagra – https://genericviagramsl.com

    KeithVon
    Richardbus
    ErnestoLem

  18. ErnestoLem says:
    Your comment is awaiting moderation. This is a preview, your comment will be visible after it has been approved.

    You actually explained that wonderfully!

    viagra generica cia and afganistan warlord and viagra
    generic viagra online
    viagra use in boys – https://genericviagramsl.com

    KeithVon
    Richardbus
    ErnestoLem

  19. ErnestoLem says:
    Your comment is awaiting moderation. This is a preview, your comment will be visible after it has been approved.

    You actually said that fantastically!

    treating viagra indigestion price viagra walgreens
    generic viagra 100mg
    natures own viagra – https://genericviagramsl.com

    KeithVon
    Richardbus
    ErnestoLem

  20. ErnestoLem says:
    Your comment is awaiting moderation. This is a preview, your comment will be visible after it has been approved.

    Thank you! A good amount of information!

    compare viagra levitra viagra results pictures
    buy viagra online
    tamsulosin interaction with viagra – https://genericviagrarcp.com

    KeithVon
    Richardbus
    ErnestoLem

  21. ErnestoLem says:
    Your comment is awaiting moderation. This is a preview, your comment will be visible after it has been approved.

    Whoa plenty of very good info.

    viagra aberdeen viagra serendipity inventor conference
    viagra without a doctor prescription
    bendungan hilir viagra – https://genericviagrantx.com

    KeithVon
    Richardbus
    ErnestoLem

  22. ErnestoLem says:
    Your comment is awaiting moderation. This is a preview, your comment will be visible after it has been approved.

    This is nicely said! .

    q viagra meta vega viagra
    viagra for sale uk
    viagra ruined sex life – https://genericviagrantx.com

    KeithVon
    Richardbus
    ErnestoLem

  23. ErnestoLem says:
    Your comment is awaiting moderation. This is a preview, your comment will be visible after it has been approved.

    Awesome information. With thanks!

    ok viagra hill climb statins or niaspan and viagra
    cheap viagra
    viagra with no prescription – https://genericviagramsl.com

    KeithVon
    Richardbus
    ErnestoLem

  24. ErnestoLem says:
    Your comment is awaiting moderation. This is a preview, your comment will be visible after it has been approved.

    You mentioned this exceptionally well.

    get viagra without a prescription can you get viagra on prescription
    viagra online
    cheap viagra cialis – https://genericviagramsl.com

    KeithVon
    Richardbus
    ErnestoLem

  25. ErnestoLem says:
    Your comment is awaiting moderation. This is a preview, your comment will be visible after it has been approved.

    You mentioned this effectively!

    viagra levitra sexual health viagra cum
    cheap viagra
    german viagra – https://genericviagramsl.com

    KeithVon
    Richardbus
    ErnestoLem

  26. ErnestoLem says:
    Your comment is awaiting moderation. This is a preview, your comment will be visible after it has been approved.

    Really plenty of valuable tips.

    viagra across the counter robin williams when bush takes viagra
    viagra generic
    will viagra work without stimulation – https://genericviagramsl.com

    KeithVon
    Richardbus
    ErnestoLem

  27. ErnestoLem says:
    Your comment is awaiting moderation. This is a preview, your comment will be visible after it has been approved.

    Nicely voiced of course. !

    viagra and chemotherapy viagra prescription medication
    generic viagra 100mg
    wicapedia ginaric viagra – https://genericviagrarcp.com

    KeithVon
    Richardbus
    ErnestoLem

  28. ErnestoLem says:
    Your comment is awaiting moderation. This is a preview, your comment will be visible after it has been approved.

    Good stuff, Appreciate it!

    no erection viagra viagra delivered on saturday by fedex
    buy generic viagra
    alternative female natural viagra – https://genericviagrantx.com

    KeithVon
    Richardbus
    ErnestoLem

  29. ErnestoLem says:
    Your comment is awaiting moderation. This is a preview, your comment will be visible after it has been approved.

    You reported that superbly.

    cheapest price for viagra and cialis female viagra without a prescription
    viagra without a doctor prescription
    viagra money settelments in 2010 – https://genericviagrantx.com

    KeithVon
    Richardbus
    ErnestoLem

  30. ErnestoLem says:
    Your comment is awaiting moderation. This is a preview, your comment will be visible after it has been approved.

    You have made your point!

    viagra vision problems watermelon has same effects as viagra
    generic viagra
    viagra time sensitive – https://genericviagramsl.com

    KeithVon
    Richardbus
    ErnestoLem

  31. ErnestoLem says:
    Your comment is awaiting moderation. This is a preview, your comment will be visible after it has been approved.

    Wow lots of good tips.

    viagra food alergies walgreens viagra rat
    viagra for women
    viagra lawsuits – https://genericviagrarcp.com

    KeithVon
    Richardbus
    ErnestoLem

  32. ErnestoLem says:
    Your comment is awaiting moderation. This is a preview, your comment will be visible after it has been approved.

    Information well applied!!

    keywords viagra viagra purchase canada
    viagra generic
    tramadol canine dosage viagra – https://genericviagramsl.com

    KeithVon
    Richardbus
    ErnestoLem

  33. ErnestoLem says:
    Your comment is awaiting moderation. This is a preview, your comment will be visible after it has been approved.

    With thanks, I like it.

    liquid viagra for dogs viagra competitors
    cheap viagra
    strengths of viagra – https://genericviagramsl.com

    KeithVon
    Richardbus
    ErnestoLem

  34. ErnestoLem says:
    Your comment is awaiting moderation. This is a preview, your comment will be visible after it has been approved.

    Thanks! Quite a lot of knowledge.

    fraud herbal viagra company seeking investors online viagra fast
    viagra for women
    viagra does not keep me hard – https://genericviagrantx.com

    KeithVon
    Richardbus
    ErnestoLem

  35. ErnestoLem says:
    Your comment is awaiting moderation. This is a preview, your comment will be visible after it has been approved.

    Very well spoken really! !

    viagra helps mens enjoy deep penetration forum viagra
    cheap viagra
    horseracing and italy and viagra – https://genericviagrarcp.com

    KeithVon
    Richardbus
    ErnestoLem

  36. ErnestoLem says:
    Your comment is awaiting moderation. This is a preview, your comment will be visible after it has been approved.

    You actually mentioned that fantastically.

    viagra clearance generic vs viagra
    generic viagra 100mg
    viagra business – https://genericviagrantx.com

    KeithVon
    Richardbus
    ErnestoLem

  37. ErnestoLem says:
    Your comment is awaiting moderation. This is a preview, your comment will be visible after it has been approved.

    Nicely put, Cheers!

    cheapest viagra reviews nexium ortho tri-cyclen viagra metrogel
    viagra without a doctor prescription
    vision problems while using viagra – https://genericviagrarcp.com

    KeithVon
    Richardbus
    ErnestoLem

  38. ErnestoLem says:
    Your comment is awaiting moderation. This is a preview, your comment will be visible after it has been approved.

    Terrific info. Many thanks.

    viagra federal express pricing viagra
    generic viagra 100mg
    viagra levitra cialis pharmacist prescription drug – https://genericviagrarcp.com

    KeithVon
    Richardbus
    ErnestoLem

  39. ErnestoLem says:
    Your comment is awaiting moderation. This is a preview, your comment will be visible after it has been approved.

    With thanks! Helpful stuff!

    buy now viagra my viagra pornstar
    viagra without a doctors prescription
    viagra super force – https://genericviagrantx.com

    KeithVon
    Richardbus
    ErnestoLem

  40. ErnestoLem says:
    Your comment is awaiting moderation. This is a preview, your comment will be visible after it has been approved.

    Cheers, Wonderful stuff!

    viagra carolina meds online viagra and 2 girls
    buy viagra
    is viagra affected by grapefruit juice – https://genericviagrantx.com

    KeithVon
    Richardbus
    ErnestoLem

  41. ErnestoLem says:
    Your comment is awaiting moderation. This is a preview, your comment will be visible after it has been approved.

    Nicely put. Many thanks!

    trustworthy viagra thorn viagra
    viagra pills
    the effects on viagra – https://genericviagrantx.com

    KeithVon
    Richardbus
    ErnestoLem

  42. ErnestoLem says:
    Your comment is awaiting moderation. This is a preview, your comment will be visible after it has been approved.

    Thanks a lot, Plenty of postings!

    edinburgh report pages search viagra viagra healing
    viagra online
    viagra online price iframe – https://genericviagrantx.com

    KeithVon
    Richardbus
    ErnestoLem

  43. ErnestoLem says:
    Your comment is awaiting moderation. This is a preview, your comment will be visible after it has been approved.

    Incredible plenty of wonderful facts.

    uk biggest viagra case why women shouldnt take viagra
    viagra for sale uk
    chewable viagra from india – https://genericviagrantx.com

    KeithVon
    Richardbus
    ErnestoLem

  44. ErnestoLem says:
    Your comment is awaiting moderation. This is a preview, your comment will be visible after it has been approved.

    You’ve made your position extremely effectively!.

    dosage of viagra fsa eligible expenses viagra
    viagra 100mg
    mark martin viagra jacket – https://genericviagramsl.com

    KeithVon
    Richardbus
    ErnestoLem

  45. ErnestoLem says:
    Your comment is awaiting moderation. This is a preview, your comment will be visible after it has been approved.

    Seriously lots of great data!

    viagra equivilant herbal viagra equivalent
    generic viagra online
    viagra for sale houston tx – https://genericviagrarcp.com

    KeithVon
    Richardbus
    ErnestoLem

  46. ErnestoLem says:
    Your comment is awaiting moderation. This is a preview, your comment will be visible after it has been approved.

    Nicely voiced indeed. .

    free sample viagra woman drug viagra
    viagra 100mg
    conterfeit viagra online – https://genericviagramsl.com

    KeithVon
    Richardbus
    ErnestoLem

  47. ErnestoLem says:
    Your comment is awaiting moderation. This is a preview, your comment will be visible after it has been approved.

    You actually reported it adequately!

    can viagra affect your heart los angeles viagra interaction flomax
    viagra without a doctors prescription
    overdose viagra died – https://genericviagramsl.com

    KeithVon
    Richardbus
    ErnestoLem

  48. ErnestoLem says:
    Your comment is awaiting moderation. This is a preview, your comment will be visible after it has been approved.

    Regards! I like this.

    can viagra hurt you new viagra
    viagra online
    inter action between viagra and cialis – https://genericviagramsl.com

    KeithVon
    Richardbus
    ErnestoLem

  49. ErnestoLem says:
    Your comment is awaiting moderation. This is a preview, your comment will be visible after it has been approved.

    Kudos, Loads of info!

    viagra for sale in the uk buy internet viagra
    viagra for sale uk
    cialis viagra cost comparasin – https://genericviagramsl.com

    KeithVon
    Richardbus
    ErnestoLem

  50. ErnestoLem says:
    Your comment is awaiting moderation. This is a preview, your comment will be visible after it has been approved.

    Regards, I like this!

    viagra heartburn croatia viagra 100mg
    generic viagra 100mg
    guide to online viagra – https://genericviagramsl.com

    KeithVon
    Richardbus
    ErnestoLem

  51. ErnestoLem says:
    Your comment is awaiting moderation. This is a preview, your comment will be visible after it has been approved.

    You explained this really well!

    men on viagra tubes viagra in a drink
    generic viagra 100mg
    cheapest price for viagra and cialis – https://genericviagramsl.com

    KeithVon
    Richardbus
    ErnestoLem

  52. ErnestoLem says:
    Your comment is awaiting moderation. This is a preview, your comment will be visible after it has been approved.

    Amazing information, With thanks!

    photos of viagra users where can i find viagra
    buy viagra online
    purchasing viagra in venezuela – https://genericviagrarcp.com

    KeithVon
    Richardbus
    ErnestoLem

  53. ErnestoLem says:
    Your comment is awaiting moderation. This is a preview, your comment will be visible after it has been approved.

    Wonderful write ups. Appreciate it.

    best price viagra boost energy drink viagra
    viagra 100mg
    phizer viagra copd trial – https://genericviagramsl.com

    KeithVon
    Richardbus
    ErnestoLem

  54. ErnestoLem says:
    Your comment is awaiting moderation. This is a preview, your comment will be visible after it has been approved.

    Really lots of very good tips.

    viagra max complaints do porn stars use viagra
    viagra without a doctor prescription
    blowjob viagra video download – https://genericviagrantx.com

    KeithVon
    Richardbus
    ErnestoLem

  55. ErnestoLem says:
    Your comment is awaiting moderation. This is a preview, your comment will be visible after it has been approved.

    Nicely put, With thanks!

    viagra comparison with cialis cvs pharmacy viagra cost
    viagra without a doctor prescription
    viagra falls southern rock – https://genericviagramsl.com

    KeithVon
    Richardbus
    ErnestoLem

Leave a Reply

Your email address will not be published. Required fields are marked *