Live data from Hacker News

Ask HN: Has Cloudflare blocked your domain without explaining what's going on?

news.ycombinator.com

21–30 of 199 posts

Re: Ask HN: Has Cloudflare blocked your domain without explaining what's going on?

#21

"I had heard good things about them on here" No, you did not hear good things about the biggest man-in-the-middle of the internet on here, and you're about to learn the tough lesson others have: don't trust Cloudflare with sensitive accounts or data.

Who are you trusting with your sensitive accounts and data?

Re: Ask HN: Has Cloudflare blocked your domain without explaining what's going on?

#22
post #6

> Like what am I even supposed to do here ? Not meaning to diminish your (quite reasonable) frustration, but is Cloudflare preventing you from transferring your domain somewhere else?

It's pendingdelete, so they're flat up holding it hostage until it's publicly available for anyone to register.

That’s terrifying. By far the worst part of this. If they ban somebody for TOS violations that is fair, but preventing people from transferring out their domain and setting it to pendingdelete is really insidious. What they are doing is akin to stealing anyone domain name permanently with no recourse. This may be grounds for a lawsuit.

Re: Ask HN: Has Cloudflare blocked your domain without explaining what's going on?

#23

I know this sounds very cynical, but there's something funny about a company doing this automated trust and safety with zero recourse spiel while being entirely okay with hosting sites where people are bullied into suicide because we can't just deny service to technically legal websites as a pseudo public utility. Pick a lane.

[deleted]

Re: Ask HN: Has Cloudflare blocked your domain without explaining what's going on?

#24
post #5

Earlier quoted context omitted.

It is actually from cloudflare. When I stopped receiving emails I checked my cf dashboard and figured something was wrong. So I opened a support ticket and someone from their support team closed the ticket and said their safety team will respond to me. Few mins later I got an email from them with the content in the original post.

You're absolutely sure right? You responded by some other means than clicking a link or hitting reply on an email? Sorry to put my forensic "fascist hat" on, I know you're not an idiot, but it's so easy to get into a tunnel vision state of action when your emotions are provoked. That's what clever account takeovers are worded to do. If it seriously is Cloudflare then the wording of that email you posted is grotesquel…

No post body was provided.

Re: Ask HN: Has Cloudflare blocked your domain without explaining what's going on?

#25
post #8

Hello, I'm the Head of Trust & Safety. Please forward me the email? This is very likely legitimate and from our team, but I'd like to confirm. justin@ cloudflare.com

If malikNF consents, would you share your findings here? It's concerning you can be banned without so much as a brief sentence explaining why.

Didn’t they get exactly a “brief sentence explaining why” in:

> Your account violated our terms of service specifically fraud

Re: Ask HN: Has Cloudflare blocked your domain without explaining what's going on?

#26
post #6

> Like what am I even supposed to do here ? Not meaning to diminish your (quite reasonable) frustration, but is Cloudflare preventing you from transferring your domain somewhere else?

It's pendingdelete, so they're flat up holding it hostage until it's publicly available for anyone to register.

If they delete your domain that is a step too far.

Re: Ask HN: Has Cloudflare blocked your domain without explaining what's going on?

#27
Hope you get it figured out.

This is an example of why it's a good idea to keep your domain registrar separate from as much else as possible. The more services you use from a company, the more surface area there is for your account to get inadvertently flagged, and the bigger impact a suspension will have.

Re: Ask HN: Has Cloudflare blocked your domain without explaining what's going on?

#28
post #5

Earlier quoted context omitted.

It is actually from cloudflare. When I stopped receiving emails I checked my cf dashboard and figured something was wrong. So I opened a support ticket and someone from their support team closed the ticket and said their safety team will respond to me. Few mins later I got an email from them with the content in the original post.

You're absolutely sure right? You responded by some other means than clicking a link or hitting reply on an email? Sorry to put my forensic "fascist hat" on, I know you're not an idiot, but it's so easy to get into a tunnel vision state of action when your emotions are provoked. That's what clever account takeovers are worded to do. If it seriously is Cloudflare then the wording of that email you posted is grotesquel…

haha yes, I am the one who initiated the communication. Just to be double sure, just checked the email header on gmail, gmail seems to agree the DKIM and DMARC are all good.

Re: Ask HN: Has Cloudflare blocked your domain without explaining what's going on?

#29

Hope you get it figured out. This is an example of why it's a good idea to keep your domain registrar separate from as much else as possible. The more services you use from a company, the more surface area there is for your account to get inadvertently flagged, and the bigger impact a suspension will have.

That's a good point. Will apply this going forward.

Re: Ask HN: Has Cloudflare blocked your domain without explaining what's going on?

#30

> Your account violated our terms of service specifically fraud. Honestly, this phrase is raising phishing alarm bells in my head, though xxdesmus said it's `likely legitimate`. The punctuation and capitalization is lacking, and really makes it sound... off. Edit: I originally thought this was an email, but upon reading the post again it sounds like a response to OP's support ticket. There's a lot less effort involve…

Yeah, the lack of comma, and the phrase "specifically fraud", are extremely alarming to me.

I understand that not all developers are native English speakers, but far more scammers are non-natives than devs are; not to mention, there are likely checks in companies like this to proofread any text before it goes "live".

Post reply on HN