Netskope Extension Risk

Detail view · rubric v3.6
← Back to catalog

dafaeffkjlknkjdcdalddcjggdngomih

dafaeffkjlknkjdcdalddcjggdngomih
Risk Score
6.27
Risk Level: High
Recommendation: 🚫 BLOCK
Category NewTab
Installs
Rating
Last updated
Manifest version MV3
CSP present ❌ no
Developer
Verified publisher ❌ no
Featured by Google ❌ no
Privacy policy link
Web Store open ↗

Top Risks

  • Search provider override to sexytab.com intercepts all browser searches — persistent traffic monetization.
  • Homepage and startup page both hijacked to sexytab.com with UTM tracking parameters.
  • Privacy policy is Google's generic account policy — not scoped to this extension at all (+10.0).
  • No developer name, email, or title — completely anonymous publisher with no accountability.
  • Extension is categorized NewTab/settings-override with adult-domain branding and no verifiable identity.

Evidence

  • search_provider_override manifest chrome_settings_overrides.search_provider sets sexytab.com as default search, is_default:true, with UTM params.
  • homepage_override manifest chrome_settings_overrides.homepage and startup_pages both point to sexytab.com with campaign UTM tracking.
  • privacy_policy_generic store Privacy policy URL is Google's own account policy (myaccount.google.com) — not scoped to this extension.
  • privacy_policy_classification api fetched=true, scope_extension=false, data_collection=true, third_party_sharing=true — worst-case generic policy.
  • no_developer_identity store developer_name, developer_email, and title are all empty; verified_publisher=false, is_featured=false.
  • no_update_date store months_since_update is null; maintenance score conservatively set to 6-12mo band (+3.5) as unknown.
  • adult_domain_branding manifest Extension targets sexytab.com — adult-content domain as search/homepage provider raises brand and ToS concerns.
  • no_csp manifest csp_present=false; MV3 strict-default applies so no +2.0 MV2 penalty, but no CSP declared in manifest.

Permissions Breakdown

  • chrome_settings_overrides.homepage high Overrides browser homepage to sexytab.com with UTM tracking — monetization redirect.
  • chrome_settings_overrides.startup_pages high Forces startup page to sexytab.com — persistent traffic hijack on every browser launch.
  • chrome_settings_overrides.search_provider high Sets sexytab.com as default search engine (is_default: true) — intercepts all user searches.

Pillar Scores

Permissions6.00
Reputation8.50
Network0.00
Webstore6.00
Maintenance5.00
Privacy10.00
Code Quality0.00
CVE Exposure0.00

Bookkeeping

Rubric v3.6
Scored at 2026-08-31 10:27
Listing SHA 5c9239cd2139…
Force block — not fired
Score recovered no
Elapsed