Netskope Extension Risk

Detail view · rubric v3.6
← Back to catalog

Minimalist Tab

khheojkcinlbbgjedicdehfbcpbfolok
Risk Score
6.64
Risk Level: High
Recommendation: 🚫 BLOCK
Category NewTab
Installs 5,000
Rating 3.2
Last updated 2024-01-28 (32 months ago)
Manifest version MV3
CSP present ❌ no
Developer info.priomedia@gmail.com
Verified publisher ✅ yes
Featured by Google ❌ no
Privacy policy link
Web Store open ↗

Top Risks

  • Search provider overridden to ad-block-pro.co/rdr.html — confirmed non-direct search redirector hijacking all user queries.
  • Developer email is free-webmail (gmail) with no developer name; privacy policy on unrelated ad-block-pro.co domain.
  • Extension is 32 months stale — well past 24-month zombie threshold; abandoned or awaiting supply-chain sale.
  • New-tab override combined with search hijack is a textbook monetization shell; triple-stale fingerprint (>24mo, MV3, newtab+search).
  • Privacy policy (444 chars) does not scope to this extension and admits no data collection while third-party sharing is silent — inadequate.

Evidence

  • search_provider_override manifest chrome_settings_overrides sets default search to https://ad-block-pro.co/rdr.html?keyword={searchTerms}; is_default=true.
  • search_redirect_probe api is_direct_provider=false; search resolves on ad-block-pro.co — confirmed redirect intermediary.
  • newtab_override manifest chrome_url_overrides.newtab = newTab.html; hijacks new-tab page for every browser open.
  • stale_extension store Last updated January 28, 2024; 32 months since update — zombie threshold exceeded.
  • free_webmail_developer store Developer email info.priomedia@gmail.com; no developer name; no business domain.
  • privacy_policy_inadequate api Policy length 444 chars; scope_extension=false; third_party_silence=true; does not cover this extension.
  • verified_publisher store verified_publisher=true; however 0c cap applies: >18mo stale, so discount capped at -1.0.
  • low_rating store Rating 3.2; below 4.0 threshold; user dissatisfaction consistent with redirect monetization.

Permissions Breakdown

  • storage low Stores local preferences; minimal risk on its own.
  • chrome_url_overrides.newtab medium Replaces new-tab page; high-visibility real estate for monetization.
  • chrome_settings_overrides.search_provider high Sets default search to ad-block-pro.co redirector; classic search hijack pattern.

Pillar Scores

Permissions6.00
Reputation7.50
Network2.00
Webstore8.50
Maintenance8.50
Privacy9.00
Code Quality0.00
CVE Exposure0.00

Bookkeeping

Rubric v3.6
Scored at 2026-09-01 04:35
Listing SHA 5e2d1d211d30…
Force block — not fired
Score recovered no
Elapsed