Tom56 - 7:50 pm on Feb 20, 2006 (gmt 0)

Yesterday I was away from my computer for most of the afternoon, but when I did my evening backups, etc. I checked Google the adult site didn't appear. My site had a normal day and I thought the problem might be over. This morning at 530am I checked Google and there was the adult site again.

To Tedster, yes, 1,2, and 3 are correct.

Your next 1. I've checked countless times over the past several days.

2. I've checked for anything that might have been added to my pages and haven't found anything. Several years ago someone hacked in when I had a different host, but they added their own index page that knocked mine out and showed their page. I've checked the whole site to be sure someone hasn't added something.

I write straight basic html so it's pretty easy to see if anything might be different. I use SSI quite a bit, javascript rarely and not much in the way of fancy stuff.

I have a do it yourself information site, so most of what I have is text and links to items that people may need for their projects.

3. The logs show 1406 referrers for January and 458 so far in February. 31 search engines for January and 30 for February. The server doesn't see the clicks.

I used the Yahoo Site Explorer and everything looks ok. It shows 5,155 in links, so that's going to take a while to check completely.

To jdmorgan

I tried a ping and tracert from a remote web site and it ended up at a different domain, but my web site host says that's his data center that owns the IP ranges. I used a tracert from a program on my computer and it ends up at my domain.

SamSpade shows the canonical name for my domain as my domain, but my IP as the other domain.

If the search engines have several locations around the country where queries are made it would be easy to see where someone in New Jersey and someone in Washington state could both get results different from someone in Virginia, but if all queries are routed, for example, Google in California, then everyone should get the same results. My host in Virginia still can't duplicate the problem.

DNS seems to be a real logical choice, but between not being too well versed in DNS and my brain synapses snapping in all directions at once from information glut over the past few days I can't get the logic to go in the right direction.

My host said that he will point my IP address to my domain and will move me to a different server.

I may be grasping at straws, but the ropes don't seem to be fastened at the other end yet.

To trader

I've checked inurl: and nothing is out of the ordinary there.

The URL of the adult page is IP/site.htm?lng=1&trg=rc. Does anyone know what the code after the IP is? Does it light any lights or ring any bells that might be associated with my problem.

The IP for the adult page is in Belarus Ukraine, but looking at the source gives another domain name. The page is framed, so the domain name is for the source of the adult page. Using the second domain name opens a page identical to the original adult page and the IP for that domain traces to the northeast US and a ISP at the same location.

I really appreciate all the help you're giving. I wouldn't mind if the problem faded off into the sunset, but I'm tenacious, my wife says just plain old stubborn, and I'd like to get the problem and a cure figured out so I can be rid of it and to have ready information for someone else who might have the problem. It would be interesting to know how many people have the problem and don't know it. I probably would still be in the dark if I hadn't been notified by someone else that the problem existed. There doesn't seem to be any indicators except the eratic showing in the search engines.

Thanks

[edited by: tedster at 3:35 am (utc) on April 10, 2006]