Trojan Panel on Bare Domain? – Expected or hacked?

[superhua]

I've been testing Cloudron by installing two apps on two subdomains (e.g. - app1.example.com and app2.example.com).

However, when I go to the bare domain (example.com), it shows this:

It looks this might be related to this project, but not sure.

I didn't install this.

With Cloudron managing the server, it is still likely the server was compromised?

[superhua]

Thank you. Good idea!

I ran traceroute and discovered that example.com resolved to the IP of an old server I once used.

Checking my registrar, I found that I had left example.com and www.example.com resolving to that old server's IP.

Deleting those entries has resolved the issue. When I check example.com it shows the expected "You are seeing this page because the DNS record of example.com is set to this server's IP but Cloudron has no app configured for this domain."

Thank you for your help!

[nebulon]

can you check, if the DNS for app1.example.com resolves to the same IP as example.com ?

[superhua]

Thank you. Good idea!

I ran traceroute and discovered that example.com resolved to the IP of an old server I once used.

Checking my registrar, I found that I had left example.com and www.example.com resolving to that old server's IP.

Deleting those entries has resolved the issue. When I check example.com it shows the expected "You are seeing this page because the DNS record of example.com is set to this server's IP but Cloudron has no app configured for this domain."

Thank you for your help!