Top Risks

• THREAT FEED: extension ID independently confirmed malicious by TPCI chrome-mal-ids — פינוקים - חיפוש סרטים וסדרות [browser-hijack] + malext.io malicious_extension_sentry (+2.5, capped).
• Search-provider override redirects all queries to quicksearch.pro — classic browser hijacker pattern.
• Privacy policy URL unreachable (fetch error); treated as no policy — privacy pillar maxed at 10.
• Developer uses free Gmail with no verified identity or business presence.
• Uninstall URL hijack registered (redirects to google.com on removal — uninstall flow manipulated).

Evidence

• search_provider_override manifest chrome_settings_overrides sets default search + homepage + startup to https://www.quicksearch.pro/
• uninstall_url_hijack crx chrome.runtime.setUninstallURL targets https://www.google.com — uninstall flow intercepted.
• privacy_policy_unreachable api Fetch failed with ConnectionError on https://searchsafe.live/legal/privacy.php — treated as no policy.
• free_webmail_dev_no_name store Developer email gadgetzoneil@gmail.com; developer_name empty; no verified publisher badge.
• low_rating store Rating 2.1 — below 3.0, consistent with user complaints about hijacking behavior.
• js_external_hosts crx Extension contacts www.quicksearch.pro in JS — monetization destination for search redirects.
• maintenance_stale store Last updated June 2025, months_since_update=14 — in 6-24mo stale band (+6.0 maintenance).
• webstore_search_override_monetization manifest Search provider override (+2.0) + uninstall hijack (+3.0) + no dev name (+1.0) compound risk.
• threat_feed_membership api Extension ID listed by TPCI chrome-mal-ids — פינוקים - חיפוש סרטים וסדרות [browser-hijack] + malext.io malicious_extension_sentry; score 6.37 -> 8.87 (+2.5 cap 2.5).

Permissions Breakdown

• tabs medium Can read tab URLs and titles; paired with search override increases tracking surface.
• chrome_settings_overrides.search_provider high Sets default search to quicksearch.pro, redirecting all user queries to third-party.
• chrome_settings_overrides.homepage medium Forces homepage to quicksearch.pro, persistent browser takeover of start navigation.
• chrome_settings_overrides.startup_pages medium Forces startup page to quicksearch.pro on every browser launch.

Pillar Scores

Bookkeeping