privacy

3067 readers

1 users here now

Big tech and governments are monitoring and recording your eating activities. c/Privacy provides tips and tricks to protect your privacy against global surveillance.

Partners:

community.nicfab.it/c/privacy

founded 2 years ago

MODERATORS

[email protected]

Is google really behind the search.app domain? (self.privacy)

submitted 4 months ago by MoondropLight to c/[email protected]

2 comments fedilink hide all child comments

Recently links shared to me from IOS users using the google app have been obfuscated with search.app/SOMEUNIQUECODE where the app redirects to the originally intended website, but, of course, the person clicking the link is revealed to the owners of search.app.

Does anyone have IOS + google and can confirm this behavior? search.app has no home page and no documentation or reporting about it that I could find (other than that it's a firebase app). The domain was registered to MarkMonitor Inc. in September of last year. But It's not clear to me what MarkMonitor's business actually is–it seems like they could just have registered it on behalf of someone.

you are viewing a single comment's thread
view the rest of the comments

[–] [email protected] 3 points 4 months ago

TL;dr:
My discovery process is kinda listed below.
https://www.slashgear.com/google-android-app-beta-makes-it-easier-to-share-search-results-20581224

MarkMonitor.

Corporate Domain Management

Your brand portfolio is exceptional. Shouldn’t your domain management service be the same?

Looks like they are a domain squatter, buying up domains and selling them at ridiculous prices.
They have a page showing some domains they have for sale https://www.markmonitor.com/domains-for-sale/top-level-domains/
But I don't see search.app listed. Doesn't mean they don't own it tho, or perhaps they managed the acquisition of it.
It's strange, because it seems like Google Domains is the registrant:
Registrant Organization: Google LLC.
Maybe MarkMonitor owned it and leased it to Google?

search.app.goo.gl probably also points to the same firebase app: https://websecblog.com/vulns/bypassing-firebase-authorization-to-create-custom-goo-gl-subdomains/

Both the Google subdomain and the TLD point to firebase hosting.

Firebase is essentially free hosting (and some Backend as a Service things).
I can't find any details on who is behind it tho, and I don't think there is any way to publicly find those details.
I'm guessing it's some sort of link obfuscation or shortener service.

It might be that it is an official Google service for their apps, which is why they are the registrant.

Ah, found something:

https://www.slashgear.com/google-android-app-beta-makes-it-easier-to-share-search-results-20581224