What is "o-o---preferred---yh---www.google.com"?

11

8

I am using Google search in Chrome and I noticed that the URL looks very strange. I searched something and I got normal results. Somehow, the URL in the address bar just caught my eye and it looked like this:

https://o-o---preferred---yh---www.google.com/search?...

This freaked me out. Does anyone know what this means? Have you seen it before?

davidXYZ

Posted 2013-10-06T01:42:26.700

Reputation: 213

1

It looks like you're seeing some infrastructure that's supposed to be under the covers but has escaped. Do happen to have a yahoo-branded connection (ISP)? I ask because of this question: http://superuser.com/questions/461244/prevent-requests-to-o-o-preferred-bellcanada-yul2-v21-cache-c-pack-googl

– mgkrebbs – 2013-10-06T06:51:06.873

I have seen this URL a few times. Can not reproduce this behaviour at the moment. https://o-o---preferred---yh---www.google.com takes me to a different version of Google with black bar at the top. – Serious – 2013-10-06T13:19:51.843

@mgkrebbs I use Time Warner cable internet. I am not sure it has anything to do with Yahoo. – davidXYZ – 2013-10-06T20:31:23.193

@Serious For me, when I type that in, it takes me to the regular Google home page. The address bar doesn't change to www.google.com but everything else looks the same. – davidXYZ – 2013-10-06T20:35:14.950

@mgkrebbs add it as an answer. it's true, it has a google ip and looks like a valid *.google.com subdomain. – Savvas Radevic – 2013-10-15T19:02:45.263

2

From the WHOIS and DNS records, It looks like it has something to do with the domain name:http://1E100.NET See the explanation here https://support.google.com/answer/174717?hl=en "1e100.net is a Google-owned domain name used to identify the servers in our network"

– suit – 2013-10-16T02:47:49.483

Playing around, there's a couple of different forms to this you can use (ie, change out the YH with other strings) that all resolve to different (Google) IPs, I'm guessing this has something to do with Google's CDN - trying to specify that you hit servers located close to you based on IP geolocation or some other method to determine what's close – bkr – 2013-10-16T05:48:12.333

Thank you all for your opinions. I can rest easy now. :) – davidXYZ – 2013-10-22T16:51:40.203

Answers

2

It's a google infrastructure domain. It can be verified using a dig (or dig command in Linux). Read the comments above. :)

You are not supposed to see this domain, because it's usually hidden, but sometimes there might be a glitch in network routing or a server problem of some sort that causes it to be seen.

It looks like you're seeing some infrastructure that's supposed to be under the covers but has escaped. Do happen to have a yahoo-branded connection (ISP)? I ask because of this question: prevent requests to o-o---preferred---bellcanada-yul2---v21---cache.c.pack.google.com – mgkrebbs

From the WHOIS and DNS records, It looks like it has something to do with the domain name:1E100.NET See the explanation here http://support.google.com/answer/174717?hl=en "1e100.net is a Google-owned domain name used to identify the servers in our network" – suit

$ dig o-o---preferred---yh---www.google.com

; <<>> DiG 9.9.2-P1 <<>> o-o---preferred---yh---www.google.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 8411
;; flags: qr rd ra; QUERY: 1, ANSWER: 7, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 512
;; QUESTION SECTION:
;o-o---preferred---yh---www.google.com. IN A

;; ANSWER SECTION:
o-o---preferred---yh---www.google.com. 300 IN CNAME o-o.preferred.yh.www.google.com.
o-o.preferred.yh.www.google.com. 300 IN A   74.125.139.105
o-o.preferred.yh.www.google.com. 300 IN A   74.125.139.104
o-o.preferred.yh.www.google.com. 300 IN A   74.125.139.147
o-o.preferred.yh.www.google.com. 300 IN A   74.125.139.99
o-o.preferred.yh.www.google.com. 300 IN A   74.125.139.103
o-o.preferred.yh.www.google.com. 300 IN A   74.125.139.106

;; Query time: 33 msec
;; SERVER: 127.0.1.1#53(127.0.1.1)
;; WHEN: Fri Oct 18 09:42:53 2013
;; MSG SIZE  rcvd: 197

Using the whois tool (or whois command) we can verify the IP:

$ whois 74.125.139.105

[...]
NetRange:       74.125.0.0 - 74.125.255.255
CIDR:           74.125.0.0/16
OriginAS:       
NetName:        GOOGLE
NetHandle:      NET-74-125-0-0-1
Parent:         NET-74-0-0-0-0
NetType:        Direct Allocation
RegDate:        2007-03-13
Updated:        2012-02-24
Ref:            http://whois.arin.net/rest/net/NET-74-125-0-0-1


OrgName:        Google Inc.
OrgId:          GOGL
Address:        1600 Amphitheatre Parkway
City:           Mountain View
StateProv:      CA
PostalCode:     94043
Country:        US
RegDate:        2000-03-30
Updated:        2013-08-07
Ref:            http://whois.arin.net/rest/org/GOGL

[...]

Savvas Radevic

Posted 2013-10-06T01:42:26.700

Reputation: 1 056

That's very helpful. Thanks for doing the research. – davidXYZ – 2013-10-22T16:50:06.883