Yes, it is noticed. I see that ns server uses ns.cloudflare.com For A record uses onlinehome-server.com

Take the complete cloudflare package, if you have not already and finish forever with ddos attacks.

Great, you put https  

*Correction, now the A record has been replaced. We hope now for quiet mining.