{"id":5292,"date":"2018-03-27T01:34:14","date_gmt":"2018-03-26T23:34:14","guid":{"rendered":"http:\/\/159.69.82.204\/win\/?p=5292"},"modified":"2020-12-13T07:18:59","modified_gmt":"2020-12-13T06:18:59","slug":"slimjet-browser-beware-of-bing-search-engine","status":"publish","type":"post","link":"https:\/\/borncity.com\/win\/2018\/03\/27\/slimjet-browser-beware-of-bing-search-engine\/","title":{"rendered":"Slimjet browser: Beware of Bing search engine"},"content":{"rendered":"<p><img decoding=\"async\" title=\"Slimjet\" style=\"float: left; margin: 0px 10px 0px 0px; display: inline\" alt=\"Slimjet\" src=\"https:\/\/web.archive.org\/web\/20180101152857\/http:\/\/z16.imgup.net\/slimjet-Ic1d2a.jpg\" align=\"left\">[<a href=\"https:\/\/www.borncity.com\/blog\/2018\/03\/02\/vorsicht-vor-bing-suchmaschine-beim-slimjet-browser\/\" target=\"_blank\" rel=\"noopener\">German<\/a>]If you are using the Slimjet browser, you should be careful with the selection of the default search engine at the moment. Slimjet developers has buried a nasty trick behind the offered Bing search engine entry \u2013 there is a redirection to <em>fpseek.com<\/em>.<\/p>\n<p><!--more--><\/p>\n<p><img loading=\"lazy\" decoding=\"async\" alt=\"\" src=\"https:\/\/ssl-vg03.met.vgwort.de\/na\/cdacfbd613284481a5a526f50c8336b8\" width=\"1\" height=\"1\">The Slimjet browser is a Google Chrome browser clone, that has been enriched with helpful additional functions like popup blocker etc. The browser can be downloaded free of charge from the website <a href=\"http:\/\/www.slimjet.com\/en\/\" target=\"_blank\" rel=\"noopener\">www.slimjet.com\/en\/<\/a>. The developer of this browser is the Austin, Texas (USA), based software producer FlashPeak Inc. I had introduced Slimjet browser a while ago and wrote a German blog post <a href=\"https:\/\/www.borncity.com\/blog\/2016\/11\/07\/angetestet-der-slimjet-browser-ein-chrome-clone\/\" target=\"_blank\" rel=\"noopener\">Angetestet: Der Slimjet-Browser, ein Chrome-Clone<\/a> with an introduction.<\/p>\n<p>But something is 'going on' with Slimjet browser since version 18. Yesterday I reported a mysterious thing about Slimjet browser. The developers seems to installing something mysterious on selected user systems (see my blog post <a href=\"https:\/\/borncity.com\/win\/2018\/03\/26\/is-flashpeak-inc-shipping-slimjet-browser-with-a-backdoor\/\">Is FlashPeak Inc. shipping Slimjet browser with a backdoor?<\/a>). Today I like to address another 'not so noble' surprise found in Slimjet.<\/p>\n<h2>Search enging Bing is redirected via fpseek.com<\/h2>\n<p>In the Slimjet you can click in the upper right corner on the gear icon (settings) and go to <em>Settings<\/em> in the opened menu. Further options can be shown using the <em>Advanced <\/em>hyperlink visible at the bottom of the page. In the Omnibox group then you can switch between different search providers like Google, Bing, DuckDuckGo and so on, using the address bar's list box.  <\/p>\n<p><img decoding=\"async\" title=\"Slimjet Suchmaschine w&auml;hlen\" alt=\"Slimjet Suchmaschine w&auml;hlen\" src=\"https:\/\/i.imgur.com\/Zkcmu8c.jpg\">  <\/p>\n<p>If you click on the triangle at the right margin of the Manage search engines option, you will reach the following page. There are the search engines, the search abbreviation and the query URL are listed.  <\/p>\n<p><img decoding=\"async\" title=\"Slimjet: Suchmaschineneinstellungen\" alt=\"Slimjet: Suchmaschineneinstellungen\" src=\"https:\/\/i.imgur.com\/xnoWZ47.jpg\">  <\/p>\n<p>And there is a rather strange query URL entered at search engine provider <em>Bing<\/em> (see the red arrow in the screenshot above). The URL points <em>to fpseek.com<\/em> and cannot be changed. My first thought: There is a browser hijacker that has changed the settings.<\/p>\n<h2>Intention of the Slimjet developers!<\/h2>\n<p>A short search on the internet brought me to the Slimjet <a href=\"https:\/\/www.slimjet.com\/en\/privacy-policy.htm\" target=\"_blank\" rel=\"noopener\">Privacy Policy<\/a> website (see following picture).  <\/p>\n<p><img decoding=\"async\" title=\"Slimjet Privacy Policy\" alt=\"Slimjet Privacy Policy\" src=\"https:\/\/i.imgur.com\/dsdrj1H.jpg\">  <\/p>\n<p>And there I found the foot note:  <\/p>\n<blockquote>\n<p>The \"Bing\" search provider included in Slimjet is a sponsored search provider served from fpseek.com and powered by Microsoft's Bing search engine. \u2026<\/p>\n<\/blockquote>\n<p>So if you want to use Bing as a search engine, you get fpseek.com without even noticing it. The provider ClientConnect Ltd. pays the Slimjet developers money to integrate its URL on fpseek.com.  <\/p>\n<h2>What does the Internet say about fpseek?<\/h2>\n<p>Based on user comments within my German blog and the above text I searched the internet. On the page <em>pcrisk.com <\/em>there is an article Fpseek.com Redirect, which deals with the removal of fpseek.com. I didn't provide the link because the site offers an obscure removal tool to keep your hands off. This is not the subject of the blog post. More interesting is the following quote on the pcrisk.com site, dealing with the question 'how to remove <em>fpseek.com<\/em>'. I didn't provide the link because the site offers an obscure removal tool to keep your hands off. This is not the subject of the blog post. More interesting is the following quote on the pcrisk.com site:  <\/p>\n<blockquote>\n<p><strong>What is fpseek.com?<\/strong>  <\/p>\n<p>Developed by ClientConnect Ltd., fpseek.com is a fake Internet search engine that supposedly enhances the Internet browsing experience by generating improved search results. Initially, fpseek.com may appear legitimate and useful, however, this site is promoted via rogue download\/installation set-ups designed to modify web browser settings without users' permission. In addition, fpseek.com continually tracks Internet browsing activity by gathering various user\/system information.<\/p>\n<\/blockquote>\n<p>There is also <a href=\"https:\/\/web.archive.org\/web\/20160505120639\/http:\/\/www.isthisfilesafe.com\/company\/Client%20Connect%20LTD_details.aspx\">this website<\/a>, listing Client Connect LTD as 'not trusted'.  <\/p>\n<h2>What does Client Connect Ltd. say about this?<\/h2>\n<p>At this point it was clear that something was going on. So I kept researching. The fake search engine <em>fpseek.com<\/em> is offered by ClientConnected Ltd. On the <a href=\"https:\/\/web.archive.org\/web\/20170619202653\/http:\/\/info.fpseek.com:80\/privacy-policy\/\" target=\"_blank\" rel=\"noopener\">Slimjet privacy page<\/a> there is a link to fpseek.com's privacy policy page. In a long text&nbsp; with a lot of capitalization (can hardly be read), you will find the following:  <\/p>\n<blockquote>\n<p>This Privacy Policy explains how the Company treats your information and protects your privacy when you Use the Software &amp; Services and the rights and options available to you regarding your information. The Company believes that you have a right to know our practices regarding the information <strong>We may collect and use when you Use the Software &amp; Services<\/strong>.<\/p>\n<\/blockquote>\n<blockquote>\n<p>When you Use the Software &amp; Services, We automatically generate an anonymous internal user ID which is assigned to your use of the Software &amp; Services (the \"User ID\") and may be combined with any of the above information including <strong>PII<\/strong> (as defined below).  <\/p>\n<p>The Company uses the information it collects for analytical, <strong>business <\/strong>and operational purposes in the following ways \u2026<\/p>\n<\/blockquote>\n<p>So buried in the text is the information that they track everything (supposedly anonymously, but there have been cases in the past where this anonymity could be undermined &#8211; and as an outsider I can't judge whether the information is really true or just a statement on the web). Within the text, there is a hint that it is also a matter of data collection for business purposes.  <\/p>\n<blockquote>\n<p>to serve you with first and third party contextual and <strong>personalized content<\/strong> on first and third party websites and applications across your devices through the use of automated <strong>decision-making algorithms<\/strong> and processes that can <strong>process your PII<\/strong> and other information <strong>associated with your User ID<\/strong>, <strong>including<\/strong> through the delivery of <strong>targeted interest-based advertisements<\/strong> from us or our partners.<\/p>\n<\/blockquote>\n<p>The provider uses the tracked information to rollout content from third-party sites and targeted advertising. It is somehow clear that the developers of the Slimjet browser have to finance themselves. But the whole thing is solved rather clumsily. With this in mind (and my yesterday article), I can no longer recommend Slimjet. At least you should avoid Bing as a search provider &#8211; and check every Slimjet update to see if anything has changed.<\/p>\n<p><strong>Articles:<\/strong><br \/><a href=\"https:\/\/borncity.com\/win\/2018\/03\/26\/is-flashpeak-inc-shipping-slimjet-browser-with-a-backdoor\/\">Is FlashPeak Inc. shipping Slimjet browser with a backdoor?<\/a> <br \/><a href=\"https:\/\/borncity.com\/win\/2018\/03\/27\/slimjet-browser-beware-of-bing-search-engine\/\" target=\"_blank\" rel=\"noopener\">Slimjet browser: Beware of Bing search engine<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>[German]If you are using the Slimjet browser, you should be careful with the selection of the default search engine at the moment. Slimjet developers has buried a nasty trick behind the offered Bing search engine entry \u2013 there is a &hellip; <a href=\"https:\/\/borncity.com\/win\/2018\/03\/27\/slimjet-browser-beware-of-bing-search-engine\/\">Continue reading <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[872,580],"tags":[88,34,1262],"class_list":["post-5292","post","type-post","status-publish","format-standard","hentry","category-browser","category-security","tag-adware","tag-browser","tag-slimjet"],"_links":{"self":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts\/5292","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/comments?post=5292"}],"version-history":[{"count":0,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts\/5292\/revisions"}],"wp:attachment":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/media?parent=5292"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/categories?post=5292"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/tags?post=5292"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}