Newtab.win
The Newtab.win domain offers no public WHOIS information and looks like it is used for browser hijacking. The Newtab.win was reported by PC users who were unable to change their Web browser settings and experienced redirects to Newtab.win often. The Newtab.win domain has a single page that is almost identical to the default new tab in Google Chrome with a few small differences. Newtab.win lacks the traditional drawing at the center and the drop-down menu with links to services by Google. Search queries made via Newtab.win are redirected to the original version of Google, but third parties may record your input. Hence, you should avoid entering personally-identifiable information on Newtab.win.
The program that may be responsible for the Newtab.win redirects may run as a browser plug-in. You may wish to revise your recently installed software and see if there are not bundled tools, which you may have missed earlier. Newtab.win may pose as the default new tab in Google Chrome and feature the names 'New Tab' or 'Chrome Search' in the tab bar. However, Newtab.win is not operated by Google and does not include contact information, a Privacy Policy and Terms of Use. You may notice the green lock icon in the URL bar/Omnibox when loading h[tt]ps://newtab[.]win and notice that it has a valid certificate from Let's Encrypt (h[tt]ps://letsencrypt[.]org). However, that does not mean that your connection to Newtab.win is secure. The certificates from Let's Encrypt have been abused by malware creators and fraudulent pages in the past. The Let's Encrypt platform is described as "a free, automated, and open certificate authority" as seen on h[tt]ps://letsencrypt[.]org/about/.
The idea behind Let's Encrypt may be noble at heart, but the certificates made with that service are found in malware samples and phishing pages. Newtab.win is registered to the 67.213.210.198 IP address that we have looked in before. It is associated with the Chromesearch.net browser hijacker, and the chances are good that Newtab.win is made by the same people behind Chromesearch.net. The Newtab.win browser hijacker may change your new tab page to h[tt]ps://newtab[.]win/?ei\=qTPKGyjcgx1sv2dRo17ON00FDd25r4jKY/WVurnxNR/s/jnRlqi3Ha9It5VVf2QwynsYiApMIdSQNoD43ffso263P68V and prevent you from changing your settings manually. You should use a credible anti-spyware instrument to clean your browser and remove riskware that may affect your online experience negatively.
