Search.clarobuscar.com

The Search.clarobuscar.com domain is registered to the 192.241.228.85 IP address, and it appears to offer access to a Web search service. Search.clarobuscar.com was mentioned in reports of browser hijacking in the last week of May 2018, and we noticed that loading clarobuscar.com shows the name 'Claro Search' in the tab's title. We had seen the name 'Claro Search' when we investigated cases of browser hijacking attributed to Isearch.claro-search.com. It appears that the team behind Search.clarobuscar.com is likely responsible for the 'Claro Search' browser hijacking too.

Search.clarobuscar.com does not offer Web search service. Instead, it works as a redirect-gateway to the legitimate version of Bing by Microsof, and the search results are loaded via h[tt]ps://www.bing[.]com/search?q=[search terms]&FORM=AFCP02&PC=CP01. PC users who may experience browser redirects to Search.clarobuscar.com and notice that their new tab loads Search.clarobuscar.com by default may have allowed an untrusted browser extension to be installed to their browser. In many cases of browser hijacking, PC users allow an optional component to a free software bundle make changes to their Internet browser, which does not produce a warning. Users are encouraged to explore the 'Custom' and 'Advanced' options of software installers to make sure no unwanted browser extensions are being installed in the background.

The 'Clarobouscar' browser extension may change the Internet settings in your Google Chrome, Internet Explorer and Mozilla Firefox installation. The programmers who created the 'Clarobuscar' extension appear to siphon Web search request through Search.clarobuscar.com and collect non-personally identifiable information like your Internet history, search terms entered on Bing and the list of your browser extensions. The data may not seem valuable to many users particularly, but it is raw data that can be processed by advertising publishers with the aim of improving a product position on your screen.

Software products associated with Search.clarobuscar.com might be tagged as Potentially Unwanted Programs (PUPs) and browser hijackers by cybersecurity scanners. It is advised to scan your PC with a trusted anti-malware utility for browser hijackers and riskware that may force you to load certain pages on the Internet. You should note that Search.clarobuscar.com may trigger redirects to phishing pages and it has more than a few clones hosted on the 192.241.228.85 IP address that include:

• Clarobuscar[.]com/search
• Gosrch[.]co
• Isrch[.]co
• M[.]gsearch[.]co
• M[.]isrch[.]co
• M[.]mbrowser[.]us
• M[.]searchfirst[.]online
• Mbrowser[.]us
• My-search[.]online
• Portal[.]gosrch[.]co