Was the DNS broken on the stream or is it just me?

Question

Domain Name System

I started to notice some suspicious pop-ups offering to update firefox and leading to strange sites.

At the same time, they crawl out where they cannot be, such as youtube.com and gazeta.ru

After a short investigation, it turned out that one dns server of the stream sometimes returns the addresses of some spam proxies that periodically push javascript to display pop-ups, for example, this happens with domain s.ytimg.com (youtube uses it to return statics). Very similar to DNS Poisoning (well, or they just broke the server, which would be very sad for them).

If you also have Stream, check (I'm still not 100% sure that the problem is not in my router, for example):

nslookup s.ytimg.com 212.188.4.10

What does it return?

Answer 1

Not an option to prescribe a DNS from Google - 8.8.8.8?

Answer 2

Well, firstly, youtube may offer to update the FF.
Secondly - give the ips, host -a will set them on them, compare.

Answer 3

Stream. Everything is good at three different points.
nslookup s.ytimg.com 212.188.4.10
Server: rr0.mtu.ru
Address: 212.188.4.10
Non-authoritative answer:
Name: ytstatic.l.google.com
Addresses: 66.102.13.102, 66.102.13.138, 66.102.13.113, 66.102 .13.100
66.102.13.101, 66.102.13.139
Aliases: s.ytimg.com

Answer 4

I would check the router.

Answer 5

Is everything ok in hosts? Maybe there is something in there?