Tuesday, March 01, 2022

NAMECHEAP & GO DADDY PLEASE Let's End the Qsearch.pw > Bing Browser Hack.

End Qsearch.pw takeovers /  aka web browser reroute aka web browser hijacking 
which they accomplish by installing a PUP which is not a poodle but a potentially unwanted program.

I have a lot of Mac computers and often they're working around the clock. Recently, I've been taken over again and again by the Qsearch. "QSearch virus on Mac is described as a web browser hijacking application or undesirable program." https://sensorstechforum.com/qsearch 

 What this does is it takes your browser ( in my case was the latest, supposedly most secure Current Chrome version Version 98.0.4758.109 (Official Build) (x86_64)) search in BING! Yes Bing. 

In my complaint letter: 

hi namecheap,
im a customer "Audiosushi" and i'm annoyed Qsearch.pw registered with you is actively
taking over computers via - Browser hijacking - they actually force you to search with Bing
which in itself is  a cruel and unusual punishment.
Anyway also registered with you is SEARCHHUNTERS.XYZ
and they too fuck with your browsers. 
Thanks if you can do anything as its annoying and i'm sick of being
infested with their PUPs 
love, jeffrey 



---

It is a terrible search engine. But Qsearch have written a quick malware / hijacking code that is hard to extricate. Qearch say "BigData Analytics for Social Media. We make Socia Media Useful to the world by creating deeper understanding of user behaviors, insight into social nework behavior, and analytic to engage and motivate people. Current Enterprise Offering: Powerlist, Google Adwords for Facebook Ads (16 times more effective than native Facebook ads. We find potential customers with high interest in your produt/service category already. This results in higher conversion rate and at least 25% more clicks for branding.)" 

It seems they do it by forcing you to adopt a stupid search engine - after scrolling through several other sites - to land you in Bing and get paid to do so.... If this happened to you I found this analysis helpful 
----> 
 Remove QSearch virus from Mac here: https://macsecurity.net/view/255 

Anyway, back to the investigations ---- the first stop is NAMECHEAP. I love them. They do what they do well. 

So the "who is" Domain Name: QSEARCH.PW Registry Domain ID: D87836682-CNIC Registrar WHOIS Server: whois.namecheap.com Registrar URL: https://namecheap.com Updated Date: 2021-12-23T11:21:22.0Z Creation Date: 2018-12-17T09:29:07.0Z Registry Expiry Date: 2022-12-17T23:59:59.0Z Registrar: Namecheap Registrar IANA ID: 1068 Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited Registrant Email: https://whois.nic.pw/contact/qsearch.pw/registrant Admin Email: https://whois.nic.pw/contact/qsearch.pw/admin Tech Email: https://whois.nic.pw/contact/qsearch.pw/tech Name Server: DNS1.REGISTRAR-SERVERS.COM Name Server: DNS2.REGISTRAR-SERVERS.COM DNSSEC: unsigned Billing Email: https://whois.nic.pw/contact/qsearch.pw/billing Registrar Abuse Contact Email: abuse@namecheap.com Registrar Abuse Contact Phone: +1.9854014545 URL of the ICANN Whois Inaccuracy Complaint Form: https://www.icann.org/wicf/ >>> Last update of WHOIS database: 2022-02-28T23:51:11.0Z <<<

Ok so we share registrars. I'll definitely make a complaint there. (  Email: abuse@namecheap.com ) but the question is this @bing .... The main reason is its the only way they can claim this: https://www.searchenginewatch.com/2013/05/21/googles-search-market-share-drops-as-bing-passes-17/ 
Google's Search Market Share Drops as Bing Passes 17%
Google's search market share dropped slightly once again (from March’s 67.1 percent to 66.5 percent), with Bing and Yahoo slightly edging up. Microsoft's Bing saw the biggest increase with a total search market share of 17.3 percent
The Qsearch bots  also operate as 
SEARCHHUNTERS.XYZ ( namecheap ) 
and wise-shield.net ( godaddy) 
so what's happening .... is industrial scale abuse and browser takeovers worldwide. 
to push a terrible search engine. 

This is the mosquito of Mac Computing / Chrome browser world but it is only one or two steps away
from more serious hacks / takeovers. That Bing might be aware of it and is benefitting from a few viruses is a strange thing.  I'm going to make complaints to namecheap and godaddy - but already know nothing can be 
done until Bing changes their client acquisition techniques. At the moment it just looks desperate. 

See if I Can swat that bug! 


NEW MUSIC AUDIO SUSHI https://open.spotify.com/playlist/5FrYdVjiuXS1CggU6nUQub

  new music  https://open.spotify.com/playlist/5FrYdVjiuXS1CggU6nUQub