Site hijack!

[shaunak]

This is not related to x10hosting but I figured this is the only place where I would get an answer.

Hi,

My site is: http://www.shaunak.ws

Occasionally, when I type my site's address without the "www" [http://shaunak.ws] I am redirected to a strange page filled with advertisements.
Screenshot1: http://imageshack.us/photo/my-images/405/problem1d.png/

However the correct site loads if I type the "www", [http://www.shaunak.ws] the page loads properly:
Screenshot 2: http://imageshack.us/photo/my-images/42/problem2l.png/

I have had this site for a long time now, and have never faced this problem.

My hosting provider is http://www.whost.in/
I contacted them but they could not identify the problem.
My domain name registrar is http://www.netlynx.com/
Even they could not identify the problem.

This is a major issue for me and I am frustrated with my hosting provider's replies.

Please tell me what I need to do to resolve this?

 

[descalzo]

What are the nameservers for your site?

http://www.whatsmydns.net/#NS/shaunak.ws

shows that they are not on the same domain. Note the missing "."

 

[shaunak]

Thanks for the link for checking.

In my registrar's site, I have updated them to
ns1.lophost.com
ns2.lophost.com

I did this a long time ago, but it still does not reflect. Why is that?

 

[wwinter]

What is the outcome?
Normally, www. and no www., the hosting company usually has the server resolving it.

 

[shaunak]

Updated the nameservers, waiting for it to propogate. Lets see if it resolves the issue.

 

[jensen]

Another way to resolve the problem - get paid hosting here at http://x10premium.com/
That way you don't get frustrated. Afterall you came here for answers right?

 

[SierraAR]

Both the www and non www domains are loading a blog titled 'Shaunak's Universe'. Here's the output from a DNS lookup on network-tools, which shows you have 2 additional nameservers besides the lophost.com ones:

'ns2.yaghost.com
ns1.yaghost.com'

Might wanna check up on those

--

IP address: 173.192.176.186
Host name: www.shaunak.ws

Alias:
shaunak.ws
www.shaunak.ws
173.192.176.186 is from United States(US) in region North America


TraceRoute to 173.192.176.186 [www.shaunak.ws]

Hop (ms) (ms) (ms) IP Address Host name
1 0 0 0 8.9.232.73 xe-5-3-0.edge3.dallas1.level3.net

2 Timed out 0 1 4.69.145.12 ae-1-60.edge2.dallas3.level3.net
3 0 1 0 4.59.36.94 softlayer-t.edge2.dallas3.level3.net
4 15 15 15 173.192.18.139 ae1.bbr01.cs01.den01.networklayer.com
5 50 50 50 173.192.18.144 ae0.bbr01.wb01.sea02.networklayer.com
6 50 50 50 173.192.18.199 ae0.dar01.sr01.sea01.networklayer.com
7 50 50 50 67.228.118.225 po1.fcr02.sr03.sea01.networklayer.com
8 50 50 50 173.192.176.186 dedicated.whost.in

Trace complete


Retrieving DNS records for www.shaunak.ws...

DNS servers
ns2.lophost.com [174.36.183.164]
ns1.lophost.com [174.36.183.163]
ns2.yaghost.com
ns1.yaghost.com

---

IP address: 173.192.176.186
Host name: shaunak.ws

Alias:
shaunak.ws
173.192.176.186 is from United States(US) in region North America


TraceRoute to 173.192.176.186 [shaunak.ws]

Hop (ms) (ms) (ms) IP Address Host name
1 0 0 0 8.9.232.73 xe-5-3-0.edge3.dallas1.level3.net

2 0 0 0 4.69.145.12 ae-1-60.edge2.dallas3.level3.net
3 0 1 0 4.59.36.94 softlayer-t.edge2.dallas3.level3.net
4 15 15 15 173.192.18.139 ae1.bbr01.cs01.den01.networklayer.com
5 49 49 50 173.192.18.144 ae0.bbr01.wb01.sea02.networklayer.com
6 50 50 50 173.192.18.199 ae0.dar01.sr01.sea01.networklayer.com
7 50 50 50 67.228.118.225 po1.fcr02.sr03.sea01.networklayer.com
8 50 50 50 173.192.176.186 dedicated.whost.in

Trace complete


Retrieving DNS records for shaunak.ws...

DNS servers
ns2.lophost.com [174.36.183.164]
ns1.lophost.com [174.36.183.163]
ns2.yaghost.com [174.36.183.164]
ns1.yaghost.com [174.36.183.163]

 

[descalzo]

DNS server handling your query: ns1.yaghost.com
DNS server's address: 174.36.183.163#53

shaunak.ws
origin = ns1.yaghost.com
mail addr = server.whost.in
serial = 2012090402
refresh = 86400
retry = 7200
expire = 3600000
minimum = 86400
shaunak.ws nameserver = ns1.yaghost.com.
shaunak.ws nameserver = ns2yaghost.com.
Name: shaunak.ws
Address: 173.192.176.186
shaunak.ws mail exchanger = 0 shaunak.ws.
shaunak.ws text = "v=spf1 +a +mx +ip4:173.192.176.186 ?all"

Pulled this off of ns1.yaghost.com , which I think belongs to whost.in .

Tell them to fix the bolded entry. (There actually is a ns2yaghost.com )