Mystartpage1.ru

By GoldSparrow in Browser Hijackers

The Mystartpage1.ru domain does not have a publicly known owner and is related to several instances of browser hijacking. The Mystartpage1.ru domain hosts a Web application named 'Free Avatar Maker' that allows users to crop images in the JPG, GIF, and PNG format to a size that is suitable for setting up as a profile picture. The 'Free Avatar Maker' app on Mystartpage1.ru does not require subscription or payment because it is supported by advertisements and affiliate network. Computer users that install freeware frequently may stumble upon programs that may change the user's homepage and search provider to Mystartpage1.ru/i/startm.html. The ad revenue from Web traffic at Mystartpage1.ru/i/startm.html and Mystartpage1.ru allows users to benefit from the 'Free Avatar Maker' app for free.

Unfortunately, some programs might hijack your Internet browser and redirect users to resources on Mystartpage1.ru and affiliated pages forcibly. It appears that the owners of the Mystartpage1.ru domain are not content with the traffic via Mystartpage1.ru/i/startm.html and may have employed underhanded tactics to drive more users their way. The Mystartpage1.ru browser hijacker associated with Mystartpage1.ru may appear as an add-on, extension, plug-in and Browser Helper Object (BHO) in your Add-ons/Extensions Manager. Affected users may notice that their homepages and preferred search aggregators are set to Mystartpage1.ru/i/startm.html.

Security researchers found out that the Mystartpage1.ru is not the only place where you can access the 'Free Avatar Maker' Web-app and the analysis of the suspicious search engine at Mystartpage1.ru/i/startm.html. Network showed that the same resources are available on:

hXXp://mystartpage6.ru/
hXXp://mystartpage5.ru/
hXXp://mystartpage4.ru/
hXXp://mystartpage3.ru/
hXXp://mystartpage2.ru/

These pages are identical and hosted on the 5.187.2.107 IP address. Most filtering services like Cisco Cloud Web Security may block requests to Mystartpage1.ru because it may be related to phishing pages and unsafe sites. Your anti-virus may show alerts saying JS.eIframeAcNMe.D36C was detected on Mystartpage1.ru. That means that a potentially harmful JavaScript is running with the 'Free Avatar Maker' Web-app at Mystartpage1.ru. Internet users are advised to blacklist connections to Mystartpage1.ru and avoid the download of software from the 5.187.2.107 IP address. You should rely on a credible anti-malware tool to delete browser hijacking apps linked to Mystartpage1.ru.

Trending

Most Viewed

Loading...