Tifferet
dlpfglcloancbgmfiohmbgicgjmmpbih
Risk Score
5.63
Risk Level:
Medium
Recommendation:
🟡 MEDIUM RISK — review
Top Risks
- Privacy policy URL is unreachable (fetch_error); no effective data handling disclosure exists.
- Search provider override routes all queries to vivotab.info, an unverifiable third-party domain.
- Developer uses free Gmail with no developer name or verified identity.
- Extension is 18 months stale — at the threshold for abandonment/sale risk.
- No installs or ratings data available; zero community validation of trustworthiness.
Evidence
- search_provider_override manifest chrome_settings_overrides sets default search to https://vivotab.info/tef/web?q={searchTerms} with is_default=true.
- privacy_policy_unreachable api Privacy policy URL https://vivotab.info/tef/info/privacy returned fetch_error:ConnectionError; scored as no policy (+10.0).
- free_webmail_no_dev_name store Developer email searchingforahighercause@gmail.com; developer_name is empty; no business website verifiable.
- stale_extension store Last updated February 19, 2025; months_since_update=18, at 6-12mo boundary scoring +6.0 maintenance risk.
- no_installs_or_ratings store Install count not published; rating=0 with no rating_count; no community signal available.
- search_provider_medium_risk manifest chrome_settings_overrides.search_provider scored as MEDIUM permission (+1.0) per rubric item.
- no_bad_hosts_or_cves crx threat_intel bad_host_hits and cve_findings_raw both empty; code_findings_raw empty; obfuscation_score=0.
- no_verified_publisher store verified_publisher=false, is_featured_by_google=false; no reputation discounts apply.
Permissions Breakdown
- searchProvider (chrome_settings_overrides) medium Overrides default search engine to vivotab.info, a non-recognized third-party provider, silently redirecting all queries.
Pillar Scores
Permissions3.00
Reputation8.00
Network0.00
Webstore4.00
Maintenance6.00
Privacy10.00
Code Quality0.00
CVE Exposure0.00
Bookkeeping
Rubric v3.6
Scored at 2026-08-31 10:30
Listing SHA
02885507179d…
Force block
— not fired
Score recovered
no
Elapsed
—