Search.nelrozplace.com
The Search.nelrozplace.com domain is associated with advertisement-supported programs, questionable browser plug-ins and freeware bundles. The 'About' page at Search.nelrozplace.com says that the site is used in conjunction with a program called 'Nelrozplace downloader.' What you may be interested to know is that http://www.nelrozplace.com/about has more than a dozen clones and PC users have reported Search.nelrozplace.com for browser hijacking.
Search.nelrozplace.com is registered to the 23.21.128.211 IP address, and it is known to contact four other IPs. Also, Search.nelrozplace.com lacks support for HTTPS-enabled connections. Third parties can alter the data exchanged between your browser and Search.nelrozplace.com, which may lead to security incidents. The Search.nelrozplace.com domain appears to works as a redirect-portal that sends Web surfers to a customized Yahoo search service. It is suspected that untrusted advertisement publishers and potential adware developers may be using Search.nelrozplace.com to push targeted commercials to users. There are Privacy Policy and Terms of Use Agreements on http://www.nelrozplace.com/privacy and http://www.nelrozplace.com/eula, but they seem generic. There are no contact details or business registration provided at http://www.nelrozplace.com/contact, except for a simple email address — answers@nelrozplace.com.
PC users may have downloaded fake or modified updates for Java and Adobe Flash from unofficial software sources, which might have allowed the 'Nelrozplace downloader' to be installed on the local disk. As we said above, there are more than a dozen other domains that feature the same layout as Search.nelrozplace.com, and they can be found on the 23.21.128.211 IP address. The clones of Search.nelrozplace.com perform browser redirects to custom Yahoo services and refer to names like blueslaluz[.]com, goldraiven[.]com, papershorty[.]com and a few others. You may want to check the Windows Control Panel for software names such as 'Nelrozplace downloader,' 'Blueslaluz downloader,' 'Goldraiven downloader' and 'Papershorty downloader.'
The applications associated with Search.nelrozplace.com (and clones) are deemed as a Potentially Unwanted Programs (PUPs) that may force browsers like Google Chrome, Internet Explorer, and Mozilla Firefox produce search results via Yahoo, as well as load a custom new tab page that was not of your choosing. The 'Nelrozplace downloader' application and its variants may be used to collect information like your Internet history logs, software configuration and recently downloaded content from the Internet. The data gathered through Nelrozplace downloader' might be used for targeted advertising and may be sold to untrusted advertising publishers. You may wish to load a reputable anti-spyware instrument that can clean files and remove the settings associated with Search.nelrozplace.com. Below the article is a list of cloned domains that we found during research:
search[.]blueslaluz[.]com
search[.]goldraiven[.]com
search[.]lakadoor[.]com
search[.]papershorty[.]com
search[.]parazipper[.]com
search[.]pikatika[.]com
search[.]romandos[.]com
search[.]schooldozer[.]com
search[.]societycake[.]com
search[.]stuckopoe[.]com
search[.]tokyofalcon[.]com
search[.]totiteck[.]com
search[.]useaget[.]com
