Netskope Extension Risk

Detail view · rubric v3.6
← Back to catalog

Pinukim - חיפוש סרטים וסדרות

apajbjmfhhnbgpjjnhlhnhciammcnbag
Risk Score
6.56
Risk Level: High
Recommendation: 🚫 BLOCK
Category Other
Installs 30,000
Rating 2.2
Last updated 2025-06-02 (14 months ago)
Manifest version MV3
CSP present ❌ no
Developer gadgetzoneil@gmail.com
Verified publisher ❌ no
Featured by Google ❌ no
Privacy policy link
Web Store open ↗

Top Risks

  • Default search engine forcibly redirected to searchsafe.live — all user queries captured by unknown operator.
  • Privacy policy URL unreachable (ConnectTimeout); data practices completely undisclosed.
  • Developer is anonymous (no name, free Gmail, no verified publisher) operating a search-override extension.
  • Uninstall URL hijack configured (redirects to google.com — suspicious use of setUninstallURL by a search hijacker).
  • Rating of 2.2 and 14-month-stale extension with no CSP; high risk of abandoned or malicious deployment.

Evidence

  • search_provider_override manifest chrome_settings_overrides sets searchsafe.live as default search engine (is_default=true) for all queries.
  • privacy_policy_unreachable api fetch_error:ConnectTimeout on https://searchsafe.live/legal/privacy.php — policy cannot be evaluated.
  • free_webmail_no_dev_name store Developer gadgetzoneil@gmail.com, no developer_name set; anonymous operator running search override.
  • uninstall_url_hijack crx chrome.runtime.setUninstallURL set to https://www.google.com — unusual for legitimate extensions.
  • low_rating store Rating 2.2; users likely experiencing unwanted search/homepage overrides.
  • stale_update store Last updated June 2025, 14 months ago; no active maintenance visible.
  • search_override_category_mismatch store Extension claims to be a movie/series finder but functions as a search-engine hijacker via searchsafe.live.
  • no_csp manifest content_security_policy is null on MV3 extension; no declared CSP protections.

Permissions Breakdown

  • tabs medium Can read tab URLs/titles; moderate risk on its own but amplified by search-provider override.
  • chrome_settings_overrides.search_provider (is_default=true) high Forces all search queries through searchsafe.live; monetization/data-collection vector.
  • chrome_settings_overrides.homepage medium Overrides browser homepage to searchsafe.live without user explicit choice post-install.
  • chrome_settings_overrides.startup_pages medium Sets startup page; hijacks new session to searchsafe.live.

Pillar Scores

Permissions6.00
Reputation8.00
Network2.00
Webstore8.00
Maintenance6.00
Privacy10.00
Code Quality0.00
CVE Exposure0.00

Bookkeeping

Rubric v3.6
Scored at 2026-08-31 10:39
Listing SHA adc384ec6732…
Force block — not fired
Score recovered no
Elapsed