Malicious sites on subdomains

Hosting Support
1

I have a website on egils.lovestoblog.com (provided by InfinityFree)
and added 2 private domains to it:
reminder-site. com
reminder-site. online
InfinityFree nameservers were used for these.
The page itself is very simple and used for test purposes only. File manager shows no suspicious content on them.

These sites got regularly marked as unsafe by Google safe browsing, as I finally tried to migrate reminder-site.com DNS to CloudFare. After that, I observed, that there were some strange DNS records for subdomains “*” pointing to 11776. BODIS. com, which I deleted immediately. I did not see them on InfinityFree, perhaps those were hidden there.

I also found out, there are strange malicious sites on all possible subdomains *. of my site, not coming from my sites origin. After migrating DNS to CloudFare, at least ifastnet (InfinityFree?) suspended them on the migrated domain.

The malicious subdomains on two other domains seem still working, regardless I am not serving this content. Any subdomain name used with http:// redirects to suspicious content somewhere. https:// in turn, resolves browsing to the right site and responds “This site can’t be reached”, because there is not one indeed.
How can anybody have a site on InfinityFree under subdomains of my private domains or InfinityFree issued ones, and how please can this be settled?

2

the site that appears in all possible subdomains is a parking page that is shown if you use Infinityfree’s nameservers. it is not malicious but is shown in all unused subdomains as a parking page. if you don’t want the parking page on unused subdomains to be shown, then dont use IF’s nameservers. keep in mind, after you switch DNS providers, it may still show those pages due to DNS caching so you may have to wait.

3

Thank you, and I know how InfinityFree parking page looks like.
Please look at this and check, if it is it indeed:
http://info.egils.lovestoblog.com/

4

Yes, it’s Bodis (parked service) and the ads it offers

image
image545Ă—587 24 KB

image
image927Ă—691 25.9 KB

5

Wow, thanks a lot. How please to get rid of it? I can move my private domain DNS somewhere else and modify records, but I cannot do it for InfinityFree served domains.

6

You can’t remove it with free subdomain.