Ustarts.xyz

By GoldSparrow in Browser Hijackers

Threat Scorecard

Threat Level: 50 % (Medium)
Infected Computers: 11
First Seen: August 30, 2016
Last Seen: March 4, 2021
OS(es) Affected: Windows

The Ustarts.xyz domain is associated with a browser hijacker that travels with freeware bundles and generates affiliate marketing revenue for its creators. The 62.109.15.15 IP address of Ustarts.xyz is hosting several other sites related to browser hijacking software such as Tabs000.online, Sear4m.xyz and Startab.me. The Ustarts.xyz is presented to users as a welcoming search service that has useful links to popular portals like eBay, Yahoo, Facebook and Wikipedia. However, the Ustarts.xyz page does not offer search functionality and acts as a redirect-portal to Baserad.xyz, which visitors are lead to believe is powered by Google. That is not true and Ustarts.xyz along with associated pages is under the command of untrusted advertisers.

An analysis of the Ustarts.xyz portal found a clone located on Tabtab.xyz and concluded that whenever a visitor lands on either one of the pages, the browser will download hundreds of tracking cookies. Advertisers linked to Ustarts.xyz may read information in the cookies to provide customized commercial content on sites they work with and maximize their profit. That type of practice is typical for search engines with a bad reputation and those pages that rely on browser hijacking apps to receive Web traffic. We should underline that Ustarts.xyz is not powered by Google and the search results on Ustarts.xyz may include links to unsafe pages. The browser hijacker related to Ustarts.xyz may run as an add-on, extension and a plug-in on your PC. It may have modified your new tab page, and you may notice unfamiliar links bookmarked in your browser. Web filtering services like Quttera and Websense ThreatSeeker block connections to Ustarts.xyz due to the nature of the site. Web surfers are advised against visiting Ustarts.xyz and may want to use a reliable anti-spyware tool to scan their machines and clean it.

URLs

Ustarts.xyz may call the following URLs:

baserad.xyz

Trending

Most Viewed

Loading...