dasword

I have scanned my website, it showed known javascript malware: malware.script src?5.5, also a line showed resource from a balcklisted domain away.trackersline.com, is it mean I got hacked?

Here some picture of scanning results:

https://ibb.co/RgNW5Vd
https://ibb.co/NKcJgv7
https://ibb.co/5ssMq1Q
https://ibb.co/jGwdHVb
https://ibb.co/7rvtpQd
https://ibb.co/d6k2c2J

If my website got hacked, how can I clear the issue by myself in this case? Or I need my backup to recover the whole website?

Thanks very much!

How can I get a proper permission of Cloudflare API Token?

Ya, I tried to use API Key because facing issues with API Token, I’m sure that API Token is not working on me while API Key does.

Well, I am using API Tokens as authentication before, and I reset all settings and setup it again, and kept using API token (also tried reset the API token), but still page rules are not created. But then after that I try using the API Key, and it works, the page rules are created. I think there is some problem between API Token authentication approach, not that sure. Well, ltr than that I try to connect the plugin cache function again, success, here is the results.
https://ibb.co/fX6QrM0
https://ibb.co/qmxNth3

TQ very much! But you may check the API Token Authentication if it works properly.

Well, I’m not using any page rules but here you are
https://ibb.co/TrQmv33

Hi, well my default SSL settings is flexible, but after changing to either full or full strict mode, I can finally enable the proxy status of my A record of domain name. But then, I still cannot use the cache plugin, here are images.
https://ibb.co/MnZ8Jnz
https://ibb.co/tCsZbtV

And here are my DNS records, anything wrongly configuring?
https://ibb.co/RYGjvG9

well, problems solved, thx

Ya, I enabled all of the proxy button but only one, idk why, the A record which my ip address pointed to my domain name, everytime I enabled the proxy status, the whole website will go down. So I’m quite?headachy?also。
Here is the img of my problem.
https://ibb.co/2jrkcFb
When I enable the proxy of my domain A record, my website will be down, on the other hand disable it again will make website active again. IDK why this problem is only happened to me since most of them in Youtube is ok.
Is it the problem I am using the SSL of ZeroSSL instead of using cloudflare one?

Here is the img of my problem.
https://ibb.co/2jrkcFb
When I enable the proxy of my domain A record, my website will be down, on the other hand disable it again will make website active again. IDK why this problem is only happened to me since most of them in Youtube is ok.
Is it the problem I am using the SSL of ZeroSSL instead of using cloudflare one?

Ya, I enabled all of the proxy button but only one, idk why, the A record which my ip address pointed to my domain name, everytime I enabled the proxy status, the whole website will go down. So I’m quite headachy also

Additional replenishment, the bug affects all of the wordpress posts including wordpress default post and custom post type that using gutenberg block editor, even we are using the default language also, once we activate the plugin the bug comes out.

For additionally info, the button is under each topic reply, the button is the same position with the quote button, it is a button that under each reply of a topic. When toggle the button under the reply, the topic will only show all the replies for the specific user, no others’ replies.
Sample Website:?https://mirror.chromaso.net/thread/1073743999
Above is the sample website with this function but the language is Chinese.
“引用” should be translated to quote and beside it the three dots pop-up “只看该作者” should be translated to only see the author.

Ok I saw it, thank you very much