Sep 22, 2019
SITE HACKED 2 TIMES IN 3 DAYS EVEN WITH CLOUDFLARE PREMIUM
https://cdn.livechat-static.com/api/file/v2/lc/att-old/4817491/2fd669a2eec14dd8f1b5d04f6336e6c3/Daniel%20kay%2019.txt
https://cdn.livechat-static.com/api/file/v2/lc/att-old/4817491/5da9ae5e41708fe33b8764404406499f/Daniel%20kay%2021sep.txt
https://cdn.livechat-static.com/api/file/v2/lc/att-old/4817491/0cd41b73f72ae6f78e0ed5f19123213b/Daniel%20kay.txt
Many thanks
Informational notification.
This question is locked and replying has been disabled.
Community content may not be verified or up-to-date. Learn more.
All Replies (8)
Sep 22, 2019
HI
See some Cloudflare support pages regarding hacked sites at https://www.google.com/search?q=support+Cloudflare+Premium+hacked+site
--------
If you post your url we can take a look at your site.
Thanks.
Sep 22, 2019
I recorded a HAR file when the site was hacked but did not let me publish it when I first posted but will try again now so hopefully you can see and advise how they did it and how to protect my site from a 3rd hack.
Did not let me attache HAR file to this email so not sure how to show you the actions now that rolled back so if you can look at my server log.
Thanks
Sep 22, 2019
HI
If this is something on your site then you need to find out what it is that is causing the redirects you refer to.
Also check your devices for keyloggers, etc.
Sep 23, 2019
"Can you see through the server logs how they managed to hack my site?" etc - sounds like you need to be talking to your host/cloudflare etc
Sep 23, 2019
Hi there,
Thanks for reporting the issue and sorry to hear that there are unexpected redirects on the site.
It appears your site is hacked and attacker injects redirects inside the website's code. You would need to find the redirect and remove it from the site. Sadly, this is out of Cloudflare's support scope and you will need to do this yourself.
You can read the below article on the suggestion to do that for Wordpress sites:
As to why this happens, you likely have types of malware or security vulnerabilities on your site that allowed an attacker to gain access to the site and place the malicious redirect.
Regards,
Bang | Cloudflare Support Engineer
I thought my site was ultra secure so can someone please tell me where the vulnerability is that is enabling them to hack my site???
Sep 23, 2019
To fix the site I restored to an early date, removed that plugin and changed my log in url
Sep 23, 2019
Glad you found the issue.
RE secure HTTPS
HTTPS helps prevent intruders from tampering with the communications between your websites and your users’ browsers. It does not prevent hacking of the site itself.
Plugins such as Wordfence will help keep your website itself safe.
Sign up for email updates for services such as https://blog.sucuri.net/2019/05/wordpress-hacks-5-ways-to-protect-wordpress-from-hacking.html to keep on top of current issues.