It's an internal domain. The user-facing stuff uses vanity domains (google, youtube, etc) but the servers' "true" hostnames reside in 1e100.net. https://suppor

It's an internal domain. The user-facing stuff uses vanity domains (google, youtube, etc) but the servers' "true" hostnames reside in 1e100.net. https://support.google.com/faqs/answer/174717?hl=en https://support.google.com/faqs/answer/174717?hl=en For example, here's the IP I get for "google.com": $ dig google.com +short 172.217.10.238 A reverse lookup on that IP resolves to... $ dig -x 172.217.10.238 +short lga25s59-in-f14.1e100.net. So, you're most certainly connecting to things in that domain, which is just a roundabout way of saying you're connecting to some Google property.