[154138] in North American Network Operators' Group
Re: DNS poisoning at Google?
daemon@ATHENA.MIT.EDU (Ishmael Rufus)
Wed Jun 27 00:08:18 2012
In-Reply-To: <CABSLv-9CHCYyQNo7Aw5nA9+dqcuMzm36XYbkkh+D9MQJ28oGDw@mail.gmail.com>
From: Ishmael Rufus <sakamura@gmail.com>
Date: Tue, 26 Jun 2012 23:07:26 -0500
To: Sadiq Saif <sadiq@asininetech.com>
Cc: "nanog@nanog.org" <nanog@nanog.org>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
I'm glad I'm not the only one that miss this one:
http://www.csulb.edu
It is in his signature and email address as well ;)
On Tue, Jun 26, 2012 at 11:04 PM, Sadiq Saif <sadiq@asininetech.com> wrote:
> Accidentally sent that to Matthew only,
>
> mind sharing the domain name?
>
> On Tue, Jun 26, 2012 at 11:53 PM, Matthew Black <Matthew.Black@csulb.edu>
> wrote:
> > Google Safe Browsing and Firefox have marked our website as containing
> malware. They claim our home page returns no results, but redirects users
> to another compromised website couchtarts.com.
> >
> > We have thoroughly examined our root .htaccess and httpd.conf files and
> are not redirecting to the problem target site. No recent changes either.
> >
> > We ran some NSLOOKUPs against various public DNS servers and
> intermittently get results that are NOT our servers.
> >
> > We believe the DNS servers used by Google's crawler have been poisoned.
> >
> > Can anyone shed some light on this?
> >
> > matthew black
> > information technology services
> > california state university, long beach
> > www.csulb.edu<http://www.csulb.edu>
> >
>
>
>
> --
> Sadiq S
> O< ascii ribbon campaign - stop html mail - www.asciiribbon.org
>
>
