Oossek.com

The Oossek.com domain is associated with a browser extension that carries the same name. We have received reports that the Oossek.com domain is loaded on computers affected by a browser hijacker. PC users have reported that they did not set Oossek.com as their new tab and start page, but it loaded nevertheless. The Oossek.com domain appears to be tailored to suit French-speaking Web surfers and offer a customized Google engine. As you might be aware, there are sites and services, which integrate a custom version of Google's engine from hxxps://cse.google[.]com/cse. However, the Oossek.com search service does not offer basic tools to rearrange the results on hxxps://www.oossek[.]com/fr/search/web/?q=[search terms], does not support rules to omit specific Web resources and there is no Safe Mode. All you receive is a very limited custom Google engine that does not load more than sixteen images per page and no more than ten links per page.

The Oossek.com browser hijacker is known to force users into loading a customized search service that lacks useful filters and may include links to phishing pages. Additionally, the Oossek.com domain is using SSL certificates issued by the Let's Encrypt initiative that lacks organization information and contact details. The Privacy Policy and Terms of Use Agreement can be found on hxxps://www.oossek[.]com/fr/about/privacy and hxxps://www.oossek[.]com/fr/about/cgu, but those are available only in French. The Oossek.com domain is registered to the 145.239.62.35 IP address, which we have mentioned earlier in our report on the Hellosearch.fr browser hijacker. We do not know who is behind these programs and what is their goal, but it is clear that their products seek to siphon Web traffic to particular servers and offer links to potentially corrupted resources. You may want to avoid loading Oossek.com and seek the help of a trustworthy anti-malware scanner, which can remove browser hijackers safely.