On Jun 26, 2012, at 2:44 PM, Eric Rosenberry wrote: > Not sure where this data got injected into the system (or who knows, > perhaps it's a DNS injection attack or something), but this certainly is It's an old trick, been around forever. You just register some random A record with a registrar. Same thing happens for google.com, microsoft.com, probably every big company. Cheers, -j