Safari: IDN Spoof of my Own Website?!

[Hemingray]

So this morning I'm visiting my own web site. I type into Safari "http://www.songofthesouth.net/home.html" and this message pops up (see screenshot)

Where the HECK did Safari get "www.trust 4 free.ws" from what I typed in? It says that's what's in the location field, but that's NOT what's in the location field. "www.songofthesouth.net/home.html" is what's in the location field! I'm at a loss here...

And this message only pops up on my web site, not anyone else's, and I only get this message in Safari. Can anyone shed some light on this? Has my web site been spoofed?

 

[jeremy.king]

If you are certain you typed in the address, I would check your host file in /etc/hosts for any weirdness and contact your ISP to see if they have any nameserver issues.

 

[ITASOR]

I don't get that when visiting your site...

 

[NoNameBrand]

Worked for me too, no trouble.

 

[Hemingray]

When I got home this afternoon, I received the following feedback from a visitor:

"As soon as your site popped up my Virus scan said that a java virus was found. Thought you might like to scan your site.Thank you"

Could this be a strange coincidence, or is something up here? I don't have any Java on my web site. JavaScript, yes, but no Java. What is UP! I'll be contacting my web site hosting company right now.

 

[Hemingray]

Update

Okay, I contacted my web site hosting company today, and they said it sounded like my web site had been hacked, and something like a link to a 1x1 transparent pixel would allow another web site (www.trust 4 free.ws I guess?) to attempt to install malicious software onto the visitors' computer.

Not quite sure if that was my situation. Anyways, I changed all my login passwords and re-uploaded my entire web site from my virgin local copy, so I overwrote any files that had been compromised. The IDN Spoof message no longer shows up in Safari.

Has anyone else ever experienced something like this? In 7+ years of making web sites, this is sure a new one to me.