My google searches have been including alot of pages that redirect to some Ukraine IP address at 188.8.131.52 both on Android and Windows. Happens on Chrome and Firefox, but only with Google, not Duck Duck Go. So I thought I'd check if my router has been hacked. All the seetings looked fine so I used the F Secure Router Checker.
But I get two different results, randomly alternating between the two! One is mt ISP, ZEN uk, which is fine and matches my router DNS settings.
The other is the Department for Work and Pensions!