Top Risks

• Search engine hijack: sets searchadjust.com as default, routing all queries to an unverifiable domain.
• Developer domain does not resolve; privacy policy unreachable — no accountability or data-handling disclosure.
• 27 months since last update with a non-resolving developer domain signals abandonment or infrastructure collapse.
• No developer name listed and unverified publisher; identity unverifiable.
• Install URL hijack flag set (install_url_hijack=true), indicating onInstalled opens a third-party page.

Evidence

• search_provider_override manifest chrome_settings_overrides sets searchadjust.com as default search engine with is_default=true.
• domain_not_resolving api threat_intel.developer_domain_info.resolves=false; searchadjust.com is unreachable.
• privacy_policy_fetch_error api privacy_policy_classification.fetched=false due to ConnectionError; policy unverifiable.
• install_url_hijack crx install_url_hijack=true; extension opens a URL on install, a monetization/tracking signal.
• stale_extension store Last updated June 2024, 27 months ago; non-resolving domain amplifies abandonment risk.
• no_developer_name store developer_name is empty; no verified publisher badge; identity unverifiable.
• js_external_hosts crx Only external JS host is searchadjust.com, which does not resolve.
• search_url_destination manifest All searches routed to https://searchadjust.com/search.php?q={searchTerms}.

Permissions Breakdown

• chrome_settings_overrides.search_provider (is_default=true) high Silently replaces user's default search engine with searchadjust.com; classic search-hijack vector.

Pillar Scores

Bookkeeping