Recently, my website was subject to a DNS attack of sorts. I have my domain name (which I won't say here but should be pretty easy to find if you're interested) registered with Hostgator and set up with NameCheap's FreeDNS service. Recently I saw that my domain was serving an error page in Chinese rather than my pages (usually hosted on Github Pages), so I looked into the DNS configuration and found an A record to a malicious IP:
;; ANSWER SECTION: [Website name redacted].com. 1285 IN A 22.214.171.124
Doing some sleuthing on this IP reveals that it's maintained by Enzu, Inc, which seems to serve a lot of spam, and reverse DNS lookup points to Asia.Optimization.to.cn.: http://mxtoolbox.com/SuperTool.aspx?action=ptr%3a126.96.36.199&run=toolpage
There seems to be really no impact from this except that my site was down for a little while, which I'm not very fussed about.
I deleted this record and reset my passwords (and enabled 2FA) on both Hostgator and NameCheap accounts. My question is: is there anything I need to do other than that? It's not really clear to me if my NameCheap account was cracked or if this was related to something else - that account has a pretty strong password (long, dictionary-attack resistant, etc) and this doesn't seem directed specifically at me. I'd like to be sure I've taken appropriate action so that this won't happen again (and so that I'm not still vulnerable to the same attacker).