You are seeing - DNS hijacking (DNS poisoning, or DNS redirection) : https://en.wikipedia.org/wiki/DNS_hijacking