[Netalyzr] DNS redirected to third-part​y servers: www.google​.com

Nicholas Weaver nweaver at ICSI.Berkeley.EDU
Thu Jun 14 13:27:48 PDT 2012


I confirmed with a colleague at Google:  It was a false positive, that address is a legitimate Google server.


DNSchanger, at least the famous attack along those lines, did not change Google but changed google analytics (www.google-analytics.com) and Doubleclick (ad.doubleclick.net) in order to inject advertisements.





More information about the Netalyzr mailing list