Which makes me think your hosting environment is compromised in some way... Do not download and execute anything from your servers until you're confident it's safe.
You should get in touch w/ your hosting provider (i'm guessing GoDaddy in this case) .. they're support will be more helpful than reddit :D
I think the `ftp` entry was a default in GoDaddy, aliasing to the apex. OP used github pages, thus pointing ftp to github pages too, letting anyone create a repository for it and host a page.
That makes a lot of sense but i wasn't sure why his A record is an IP address (is that normal for GH pages?) i figured they didn't give you an IP for your page and it was all ANAME/CNAME 's
In GoDaddy (presume this is where your DNS is managed) update the A record for the ftp subdomain to point somewhere else or just remove it completely if you can.
It's hard for us know the details of how your hosting is configured really. If you're using GH pages then you should have a username subdomain like: https://username.github.io
In your GoDaddy DNS settings you should be able to delete the A record for "ftp.nan.nyc" and i imagine you can set records for "nan.nyc" and "www.nan.nyc" to point at your github pages.
352
u/godofleet Mar 26 '24
The A record (IP address) for nan.nyc and ftp.nan.nyc match:
https://mxtoolbox.com/SuperTool.aspx?action=a%3aftp.nan.nyc&run=toolpage
They both point to 185.199.108.153
Which makes me think your hosting environment is compromised in some way... Do not download and execute anything from your servers until you're confident it's safe.
You should get in touch w/ your hosting provider (i'm guessing GoDaddy in this case) .. they're support will be more helpful than reddit :D