nanog mailing list archives

Re: DNS poisoning at Google?


From: Sadiq Saif <sadiq () asininetech com>
Date: Wed, 27 Jun 2012 00:04:58 -0400

Accidentally sent that to Matthew only,

mind sharing the domain name?

On Tue, Jun 26, 2012 at 11:53 PM, Matthew Black <Matthew.Black () csulb edu> wrote:
Google Safe Browsing and Firefox have marked our website as containing malware. They claim our home page returns no 
results, but redirects users to another compromised website couchtarts.com.

We have thoroughly examined our root .htaccess and httpd.conf files and are not redirecting to the problem target 
site. No recent changes either.

We ran some NSLOOKUPs against various public DNS servers and intermittently get results that are NOT our servers.

We believe the DNS servers used by Google's crawler have been poisoned.

Can anyone shed some light on this?

matthew black
information technology services
california state university, long beach
www.csulb.edu<http://www.csulb.edu>




-- 
Sadiq S
O< ascii ribbon campaign - stop html mail - www.asciiribbon.org


Current thread: