Update 2: ----------------------------- Helo, To clarify the issue, this account was identified in a recent fraud review, however it appears to have been a false positive. We have left a note in this account for future reference. Kind Regards, Cloudflare Trust & Safety
》it appears to have been a false positive That's a scary answer. Guess I'll put only mirror/backup domains behind CF in the future.
'behind CF' isn't the problem, if I understand you correctly, it's that in OP's case CF was the registrar.
FWIW I also had a recent experience with Cloudflare "Trust & Safety" and it was my first negative Cloudflare experience, unfortunately. A client-of-a-client had their site reported to CF for malware distribution via Netcraft. I reviewed the site and found nothing unsual-looking. I dug out a month's worth of access logs for the site, carefully filtered them, and then eyeballed all of the tens of thousands of remaining…
My only interaction with cloudflare's "Trust and Safety" team involved reporting a site using their services, and that site hosted a large archive of child pornography [1], for which I provided a sizable chunk of evidence, which would have let them easily verify my claim. All I got back was a canned response that cloudflare is not actually hosting anything and cannot do anything and will forward my complaint to the I…
I don't understand why it's so hard for companies to discriminate between sites like your example and sites like my example.
This part of hosting actually worked better back when we were all using GoDaddy and Bluehost and the like.
Oh for F's sake.. I had moved my domains from Google to CF sometime ago, assuming my emails etc. are protected, and now this. Honest question: What is a good registrar? I used to use Namecheap in the past and have nothing against them. Unfortunately, unlike other things I cannot self-host a registrar. Thoughts? Suggestions? Edit: TBH, I find this wording rather rude "The suspension is permanent and we will not be mak…
I've been using namecheap for years now without any problems. Others I use or have used and would recommend are Gandi and Porkbun.
Have you seen this thread? https://news.ycombinator.com/item?id=30506581
Nope, thanks for bringing it to my attention. Though not sure who to trust at this point haha... Anyone have other recommendations for where I should keep my domains?
I picked Porkbun from other threads on this topic. You can search "registrar" on hn.algolia to see yourself, but tbh I never really found a single _consensus_ opinion.
Very worrying. One of the reasons I'd choose a non-huge company like Cloudflare would be I'm less likely to encounter one of these "our automation banned you, we won't tell you why, fuck off" episodes. Looks like more and more companies are cargo-culting this horrible practice. Waiting for my utility company to turn off my heat: "Your house is fraud. We won't tell you how we know. Fuck off and freeze."
Cloudflare is by no means a "non-huge company" - don't they route/cdn like 1/4 of the entire internet? going with cloudflare is a choice towards centralization.
You keep framing this as "how do I make sure I don't get into this situation again," but with the attention this is getting (#6 on HN) and just how bad the issue is (both functionally and PR-wise)... Cloudflare should really do a public post-mortem here. It sounds like it's their fault.
I also want to see a Cloudflare post-mortem here. All of my domains are with them. The worse part of OP's story is that they even prevented him from moving the domains to another registar. So if this happens to any of us we're completely locked out of our email.
It’s not clear if he move the registration to Cloudflare, or just the name server.
There’s a case for not having your registrar also host your DNS records.
I recently transferred my domains from Google to Cloudflare precisely to avoid being terminated by Google's false-positive AI. Now Cloudflare is pulling the same stunt? Is there anything you can say to reassure your customers? Or do we need to find another registrar?
I don't know they recently started allowing to use any nameserver apart from cloudflare nameservers after transferring the domain. This vendor lock is what prevented me from using Cloudflare, but it turns out there is another reason, reading OP's text. For domain name registration, I tend to trust smaller players. They tend to not run bullshit AI to suspend customers, and are small enough to be able to spend at least…
This mirrors my strategy personally and professionally. I’ve dealt with CF Trust and Safety before, and they are hands down the most opaque organization I’ve ever dealt with. It’s almost like they take pleasure in being withholding, far beyond anything I’ve ever seen from a “trust and safety” team anywhere else.
This reminds me of the negative experience I had with Cloudflare in the past, the thing that really bothered me about it was that though their system had made actions on my account their own audit log attributed those actions to me.
So I'm still left wondering, was that intentional or a bug?
FWIW I also had a recent experience with Cloudflare "Trust & Safety" and it was my first negative Cloudflare experience, unfortunately. A client-of-a-client had their site reported to CF for malware distribution via Netcraft. I reviewed the site and found nothing unsual-looking. I dug out a month's worth of access logs for the site, carefully filtered them, and then eyeballed all of the tens of thousands of remaining…
My only interaction with cloudflare's "Trust and Safety" team involved reporting a site using their services, and that site hosted a large archive of child pornography [1], for which I provided a sizable chunk of evidence, which would have let them easily verify my claim. All I got back was a canned response that cloudflare is not actually hosting anything and cannot do anything and will forward my complaint to the I…