Where exactly does a QNAP NAS come into play ? Are you exposing your QNAP NAS to WAN?.. NEVER ever ever ever do that.
If you have to host some sort of website, get a cheap webspace somewhere at least you have no chance that way of getting your NAS and patient data encrypted for ransom or leaked to hackers.
I have also removed the URLs you posted, as a quick check on shodan revealed several services running on that domain