It looks like I have lost Ethereum shares during the DDoS attack. Is that the case ?

could you please confirm that the tls configuration should look like this:

stratum+tls://eth.coinfoundry.org:3075 

(multiple high end cards)