To me, it looks like the there's a sub-domain entry in our DNS record that's wonky. I have to figure some way to specify that all sub-domains (i.e. *.capitalcichlids.org) all refer to the same server, and thus website.

It's also probable that our hosting company serves multiple websites on a single server, and uses some mechanism to determine which domains serves up which webpages on their server. I'll contact the hosting company and make sure that both capitalcichlids.org and www.capitalcichlids.org all point to the same webpage/account on their end. Google should pickup those changes.

AND take care of those XSS vunerabilities.

Thank you guys so much!

Franny