My coworker searched for "cutadapt" at Google Scholar and the top hit was http://journal.embnet.org/index.php/embnetjournal/article/view/200. When he clicked on it, it took him to a site that said something about having a vulnerability and that he should call a certain phone number. It also popped up a box asking for security credentials. He couldn't close the tab, so he restarted the computer to get rid of the page.
I tried the same search and got to the same site. I ended up having to close all of the tabs in my browser to get this security box to disappear.
I wanted to report this, but wanted to be sure I could report exactly how to reproduce the problem. So, I tried the same search again and clicked on the same link with the same address displayed when I hovered over the link. This time, however, I ended up at a completely different, but still obviously incorrect website that seemed malicious to me.
Then I tried a third time and after a long wait, ended up at the right site (or at least it looks like the right site). Now, it only takes me to what looks like the correct site, after a long wait each time.
So, my question is whether this is something that I should report to the web site in question, to my DNS provider, or Google? Or am I even asking the right question(s)?