[Netalyzr] DNS redirected to third-part​y servers: www.google​.com

Nicholas Weaver nweaver at ICSI.Berkeley.EDU
Thu Jun 14 13:27:48 PDT 2012

I confirmed with a colleague at Google:  It was a false positive, that address is a legitimate Google server.

DNSchanger, at least the famous attack along those lines, did not change Google but changed google analytics (www.google-analytics.com) and Doubleclick (ad.doubleclick.net) in order to inject advertisements.

More information about the Netalyzr mailing list