I bought new Chromebook at Costco and found that my Chrome browser redirects me to trovi.com search engine. I did not know anything about trovi and after googling I found that trovi is classified as browser hijacker which modifies a web browser’s settings without my permission. Definitely it does not look good. Before removing trovi I did small research about this site. The whois tool shows that it was created by ClientConnect LTD.
% whois trovi.com | egrep -i organization
Registrant Organization: ClientConnect LTD
nslookup retrieves A and AAAA records of trovi.com:
% nslookup -query=A trovi.com 18.104.22.168
% nslookup -query=AAAA trovi.com 22.214.171.124
To to my astonishment trovi.com is hosted on AWS, so all these IP addresses belong to Amazone.
Info for some IPv4 and IPv6 addresses:
% whois 126.96.36.199 | grep Organization
Organization: Amazon Technologies Inc. (AT-88-Z)
% whois 2600:9000:2211:5000:12:aa89:3880:93a1 | grep Organization
Organization: Amazon.com, Inc. (AMAZON-4)