PSA: delete old DNS records you're not using. I had an old subdomain still pointed to DigitalOcean from some dead project. Apparently when the IP got reused, a hacker got it, and was able to use it to publish content on my subdomain to steal SEO. They were even able to set up Google Search Console.
