The issue described suggests that the DNS server may have been compromised, causing it to redirect traffic to a suspicious site. This could be due to a DNS spoofing or poisoning attack, where the DNS server's records have been altered to redirect traffic to a different site