can someone help i have no clue what happend my domain is biedenkopf.org i removed all tunnels and e

can someone help i have no clue what happend my domain is biedenkopf.org i removed all tunnels and entreys only email redirect is reaining the problem is that all requests from set domain is auto redirected to a malisios webseite (crypto scam) the address (https://nkbihfbeogaeaobhlefnkodbefgpgknn.com)

if anyone has a ideer pls help Thx :NotLikeThis:

Bildschirmfoto_2023-09-23_um_16.38.11.png

SSpontan_tv can someone help i have no clue what happend my domain is biedenkopf.org i remov...

Chaika•9/23/23, 6:12 PM

Looks like your Cloudflare account may have been compromised.

Check your Audit Log (Manage Account -> Audit Log) for any unauthorized changes.
If you can't find the redirect being created there, it's most likely either a Single Redirect (within your site in CF Dash, go to Rules -> Redirect Rules, look at Single Redirects) or a Page Rule Redirect (check under Rules -> Page Rules)

CChaika Looks like your Cloudflare account may have been compromised. Check your Audit ...

Spontan_tvOP•9/23/23, 6:25 PM

oh sh*** looks like it dang i found a Ukrain IP exesing and creating a redirect url i chanched my password and 2fa and remoced evrefing that the ip did thanks for tip i onestly dident notist it mutch thanks to you

Kit_•9/23/23, 7:10 PM

Hi, I have a problem. google services do not work in my subnet when using dns 1.1.1.1, what should I do in this situation. Could you please tell me if there are any fees for accessing Google accounts in Cloudflare? Is it not in this chat ?

ZZnuff I know that CF also logs the ASN of the request in the dashboard, but is there a...

Chaika•9/23/23, 8:42 PM

You can use a simple transform rule -> modify request header to include it:

KKit_Hi, I have a problem. google services do not work in my subnet when using dns 1....

Chaika•9/23/23, 8:44 PM

What do you mean "any fees for accessing Google accounts in Cloudflare"
1.1.1.1 is just free DNS, just like 8.8.8.8 or 9.9.9.9. What makes you think that 1.1.1.1 is causing the issue?

Chaika•9/23/23, 8:46 PM

Rules -> Transform Rules, and then you can select Modify Request Header -> Create rule

ZZnuff I only have Path and Query

Chaika•9/23/23, 8:46 PM

you're trying to create a rewrite url probably, not a modify request header rule

Chaika•9/23/23, 8:46 PM

have to select the modify request header tab

AA•9/23/23, 10:19 PM

there was a saas chat going on somewhere?

Ricky U•9/24/23, 4:01 AM

Does CF offer API Sheild or an API gateway service for PRO or business customers? The blog post here doesn't state, and also needs to be updated as the menu layout/text has changed since : https://blog.cloudflare.com/api-gateway/ -- I hope its for all customers

RRicky U Does CF offer API Sheild or an API gateway service for PRO or business customers...

Karew•9/24/23, 4:06 AM

Enterprise only

Karew•9/24/23, 4:06 AM

You can do a lot of API shielding with your WAF rules though

Karew•9/24/23, 4:07 AM

Rate limits, automatically discarding requests with bad or missing headers, etc

Millionaire Draw•9/24/23, 10:24 AM

Good morning everyone, I would really appreciate some help. I have a worker that is over a year old that uses BUFFER and CRYPTO. When I create a new worker with the exact same code and npm libaries I get errors. Specifically BUFFER does not exist and CRYPTO is not declared. What can I do. I really don't want to mess with my legacy worker in case I break it

Abhinav Saraswat•9/24/23, 11:09 AM

Hi everyone,
I'm facing an issue with the cloudflare CDN. I'm using workers to update the response by adding some headers. But somehow the last-modified value in the response through CDN is coming different from the original response if we access without CDN. Is it due to cloudflare caching?

AAm1nCmd Hello everyone I setup my website security Level to High, then change it to Med...

Isaac McFadyen•9/24/23, 11:56 AM

Do you mean all of your users are seeing that, or you are when accessing other sites?

Kasumi•9/24/23, 3:17 PM

Is there a reason if you use the E-Mail Code for Zero Trust login that you get the email just a few hours ago

Kasumi•9/24/23, 3:22 PM

If someone in my Team tries to login into Web SSH or generally with Cloudflare Zero Trust he dont get any Code from Cloudflare to Autehnticate

Kasumi•9/24/23, 3:22 PM

Anf if just much hours too late. Thats an issue that exists since idk much years. And really needs to get fixed soon

Original message was deleted

Kasumi•9/24/23, 3:39 PM

I cant think when someone disturbs me and sais the whole time that it doesnt work etfc

KKarew Enterprise only

Ricky U•9/24/23, 4:43 PM

I was looking for a way to protect all my cf pages endpoints functions(workers) with pre auth checks on the headers, validatie jsonwebtoken etc.. What are my options using cf? Was hoping cf API sheild would be an option, but only for ent customers..

Frerduro•9/24/23, 4:45 PM

Is this even XSS? a trusted user is being flagged and blocked for XSS and I dont know if I should be disabling this or bypassing them

Original message was deleted

Frerduro•9/24/23, 4:48 PM

there is nothing extra in the json export. Are you saying it could be some of the text they are trying to save be flagging this?

Isaac McFadyen•9/24/23, 4:48 PM

Yup. That's a likely reason. As far as I can see the path and query string look fine.

Isaac McFadyen•9/24/23, 4:48 PM

Assuming that the query string is meant to be the filename they are trying to save.

Frerduro•9/24/23, 4:49 PM

yeah they are just trying to edit a yaml file through pterodactyl

Isaac McFadyen•9/24/23, 4:49 PM

Do you know what they're trying to put in the YAML file?

Frerduro•9/24/23, 4:49 PM

ill ask

Isaac McFadyen•9/24/23, 4:49 PM

That rule looks like it's detecting JavaScript, which shouldn't be present in YAML.

IIsaac McFadyen That rule looks like it's detecting JavaScript, which shouldn't be present in YA...

Frerduro•9/24/23, 4:54 PM

looking at the file now I dont see javascript its just mythicmobs code

Isaac McFadyen•9/24/23, 4:55 PM

Hmm interesting. Possibly a false detection then?

Frerduro•9/24/23, 4:56 PM

I dont want to completly disable XSS detection through

Isaac McFadyen•9/24/23, 4:56 PM

Yeah. If you're on a non-Free plan you might be able to tune the sensitivity of that detection? Or bypass the user manually, but if it happens again that might get tedious.

Frerduro•9/24/23, 4:57 PM

its flagging me when I try to save the file

fmorenoadmin•9/24/23, 4:58 PM

HELP. When I make a POST with JQuery, it gives me the following page as a response:
Please wait while your request is being verified...

Frerduro•9/24/23, 4:58 PM

I can setup a waf skip rule but it will skip ALL managed rules not a specific one

Original message was deleted

Frerduro•9/24/23, 4:58 PM

no it doesn't

can someone help i have no clue what happend my domain is biedenkopf.org i removed all tunnels and e

Similar Threads

Similar Threads

Similar Threads