Possible attack? hostname ns1648.ztomy.com

[sdz]

Hi,

just opened my macos 11 terminal and noticed my username@ns1648.

My hostname is different.

checked command hostname

and it says
ns1648.ztomy.com


What's that? And how did it get to my mac? Is it compromised? Part of a botnet?


Edit: could be a hijacked DNS server of the VPN provider I am using... Switched to alternative public dns, seems resolved.

 

[Apple_Robert]

Do a search on ztomy.com and you will see numerous cites about DNS hijacking by them.