Google Push Notifications Routing Change

General
,
1

It looks like Google notifications are using mtalk.Google now instead of firebaseinstallations.googleapis and fir-auth-gms.firebaseapp

I was messing with my DNS settings the other day and noticed mtalk.google coming from my phone and hadn’t seen that domain before. Figuring it was a new google tracking domain, I blocked it. Flash forward three days and I haven’t been getting notifications properly, remove the block and get a ton of missed messages and alerts coming through. Figured I’d post here in case anyone else is having an issue or wondering what the domain is doing.

P.S. MySudo seems to send but not receive any messages if this domain is blocked, they sit waiting for it to be open again and then all come in at once.

2

They have been using that domain for quite some time.

3

Eh, when I initially setup my DNS filters it wasn’t showing up at all. And when i searched it, I found what seemed to be an old product they had discontinued.

4

Imteresting, I have seen this domain pop up in my DNS logs in 2023.

5

It looks like firebaseinstallations hasn’t been being used at for the past two months at least, that’s as far back as my logs on a family members phone go and it has no hardening other than my stripped down NextDNS profile on it.

Edit: My router profile shows it being used two days ago, I’ll have to figure out what device that is.