Advisurf.com

Threat Scorecard

Ranking: 13,310
Threat Level: 50 % (Medium)
Infected Computers: 9,935
First Seen: November 22, 2018
Last Seen: September 14, 2023
OS(es) Affected: Windows

Advisurf.com is a domain that is associated with the 52.178.105.179 IP address and complaints of browser hijacking at the time of writing. Advisurf.com appears to host a search service, which looks very similar to the legitimate Google.com landing page. The Advisurf.com site offers a search bar, a doodle at the top, two buttons — 'Search' and 'Images,' as well as links to a legal agreement by a company called Digifox SAS. The Advisurf.com site appears to be related to a free downloader manager that is reported to change the user's Internet settings. The Advisurf.com download manager is observed to change the user's start page and default search provider to h[tt]p://advisurf[.]com.

The Advisurf.com search service lacks a valid digital certificate and does not support encrypted connections. That means your input on Advisurf.com can be viewed by an unknown number of third parties and transmissions between your device and Advisurf.com can be subject to man-in-the-middle attacks. Advisurf.com may resemble Google.com, but it performs very differently. The Advisurf.com site is a redirect-gateway that redirects the users to h[tt]ps://search.yahoo[.]com/search?p={search+terms}&guccounter=1. The software developers behind the Advisurf.com seem to use monetization services by Yahoo and help advertisers at Search.yahoo.com push targeted messages to whoever is using their software. The Advisurf.com downloader software may be free to use, but it drops tracking cookies and appears to collect user information like bookmarks, search terms, IP address and OS version. It is fine for free software creators to use a monetization model that does not involve paying a subscription fee, but the layout of Advisurf.com may be viewed as a clone of Google.com and the browser redirects to Yahoo services may not be welcomed by many users. The company behind Advisurf.com does not appear to have an official homepage. The tracking technologies employed by the Advisurf.com download manager may be intrusive, and you might want to remove the program with the help of a credible security instrument. Also, we found that there are several more domains on the 52.178.105.179 IP address reported of browser hijacking. Unwanted redirects may be caused by:

dig[.]coinup[.]org
www[.]go-setting[.]com
www[.]goal-search[.]com
www[.]home-be[.]com
www[.]home-gogo[.]com
www[.]hop-search[.]com
www[.]nav-search[.]com
www[.]q-qo[.]com
www[.]qle-nav[.]com
www[.]qte-search[.]com
www[.]search-by[.]com
www[.]search-new[.]com

URLs

Advisurf.com may call the following URLs:

https://www.advisurf.com/web?

Trending

Most Viewed

Loading...