DNS poisoning at Google?

Wed Jun 27 04:14:14 UTC 2012

On Jun 26, 2012, at 9:07 PM, Ishmael Rufus wrote:

> I'm glad I'm not the only one that miss this one:
> 
> http://www.csulb.edu
> 
> It is in his signature and email address as well ;)

The queries do seem to be taking a number of seconds, though, as opposed to being nearly instant when I reference the DNS servers of record directly.
The results I get at home (via SpeakEasy) all appear correct, though.

> On Tue, Jun 26, 2012 at 11:04 PM, Sadiq Saif <sadiq at asininetech.com> wrote:
> 
>> Accidentally sent that to Matthew only,
>> 
>> mind sharing the domain name?
>> 
>> On Tue, Jun 26, 2012 at 11:53 PM, Matthew Black <Matthew.Black at csulb.edu>
>> wrote:
>>> Google Safe Browsing and Firefox have marked our website as containing
>> malware. They claim our home page returns no results, but redirects users
>> to another compromised website couchtarts.com.
>>> 
>>> We have thoroughly examined our root .htaccess and httpd.conf files and
>> are not redirecting to the problem target site. No recent changes either.
>>> 
>>> We ran some NSLOOKUPs against various public DNS servers and
>> intermittently get results that are NOT our servers.
>>> 
>>> We believe the DNS servers used by Google's crawler have been poisoned.
>>> 
>>> Can anyone shed some light on this?
>>> 
>>> matthew black
>>> information technology services
>>> california state university, long beach
>>> www.csulb.edu<http://www.csulb.edu>
>>> 
>> 
>> 
>> 
>> --
>> Sadiq S
>> O< ascii ribbon campaign - stop html mail - www.asciiribbon.org
>> 
>> 

Aloha,
Michael.
-- 
"Please have your Internet License             
 and Usenet Registration handy..."