Why Netcraft is alerting on 149.11.155.104.bc.googleusercontent.com?

See: http://toolbar.netcraft.com/site_report?url=http://149.11.155.104.bc.googleusercontent.com

Read: http://security.stackexchange.com/questions/17440/why-does-chrome-connects-to-markmonitor-always-on-startup

DNS bad zone → http://whois.domaintools.com/googleusercontent.com

pol

So google is aware of the markmonitor site abuse: http://www.google.com/safebrowsing/diagnostic?site=googleusercontent.com/
See the malcode on googleapis dot com: https://www.virustotal.com/en/domain/googleapis.com/information/
Avast detects: Win32:Fareit-HE [Trj] - which also easily could be a FP.

polonus