Subdomain of my website is being used as an open redirect, how do I stop this?

Question

So I was recently contacted by Netcraft Takedown Service alerting me to a malicious redirect using my domain.

They said the following URL is being used for malicious