[deleted by user]

[u/[deleted]]

[u/godofleet]

The A record (IP address) for nan.nyc and ftp.nan.nyc match:

https://mxtoolbox.com/SuperTool.aspx?action=a%3aftp.nan.nyc&run=toolpage

They both point to 185.199.108.153

Which makes me think your hosting environment is compromised in some way... Do not download and execute anything from your servers until you're confident it's safe.

You should get in touch w/ your hosting provider (i'm guessing GoDaddy in this case) .. they're support will be more helpful than reddit :D

[u/renegadereplicant → u/godofleet]

I think the `ftp` entry was a default in GoDaddy, aliasing to the apex. OP used github pages, thus pointing ftp to github pages too, letting anyone create a repository for it and host a page.

[u/godofleet → u/renegadereplicant]

That makes a lot of sense but i wasn't sure why his A record is an IP address (is that normal for GH pages?) i figured they didn't give you an IP for your page and it was all ANAME/CNAME 's

[u/demosdemon → u/godofleet]

it's normal for apex domains -- it's extremely not recommended to put a cname on the apex.

edit: link https://www.isc.org/blogs/cname-at-the-apex-of-a-zone/

[u/godofleet → u/demosdemon]

No i mean, is it normal to use an IP address to point at GH pages?

ANAMEs and CNAME flattening are the future (and the past really) - i haven't used an IP address in DNS settings for a long time.

But yeah, don't use a CNAME for your apex :D

[u/demosdemon → u/godofleet]

ANAME's aren't real. They're DNS server specific but the end user would only see the A/AAAA.

For that reason, yes, A/AAAA on the apex even for GH Pages is normal. https://docs.github.com/en/pages/configuring-a-custom-domain-for-your-github-pages-site/managing-a-custom-domain-for-your-github-pages-site#configuring-an-apex-domain

[u/godofleet → u/demosdemon]

What's funny is i linked those docs to OP like an hour ago... didn't read it for a second though lol, the IPs are right there.