My domain has been hijacked
I own mythosia.xyz and someone has managed to use my domain for a minecraft server I did not endorse or allow. What do I need to do?
9 Replies
?abuse
If you feel that a site is engaging in illegal or inappropriate activities, you can submit an abuse report at https://abuse.cloudflare.com/. The Trust and Safety team will review the details and reply if appropriate. You can also report the site to your relevant local authorities. Reports cannot be filed via Discord or with individual employees or Champs.
I've sent a report, how long will it take to process?
No clue.
well i've managed to shut it down
but i'd like to know why it even happened in the first place
only me and my 2 co-workers have access to the cloudflare account
if the domain is still in your account/control then abuse isn't the right place for it, unless you want them to suspend your current access lol
follow https://developers.cloudflare.com/fundamentals/setup/account/account-security/secure-a-compromised-account/, specifically check your audit log to see what changed. I'm not sure what "use my account for a mc server" means. A Redirect? An A record?
A record. I've cleared cache and made a new A record to point to 0.0.0.1 for play.mythosia,xyz and mythosia.xyz
in the minecraft multiplayer tab i can still use my domain to connect to the other minecraft server
just dns cache
look in audit logs, filter to your domain, and look for record additions/modifications then
shows nothing. im really puzzled as to how my domain can point to another minecraft server.
because everything seems fine
no security logs, no audit logs that werent me and theres only 1 active session
wait hold on
i think i know why
our play record pointed to a specific IP
we used pebblehost for our own minecraft server
pebblehost probably just reused the IP for this other server and one of us forgot to delete the play record