Is 3D Street View safe?
3D Street View sets 3dstreetview.com as the browser's default search provider and sends address-bar searches there.
When installed, its manifest declares a default search provider with search and suggestion URLs on 3dstreetview.com. Browser search terms entered through the address bar are inserted into those URLs and sent to that domain for results and suggestions.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Findings
Default search queries are sent to 3dstreetview.com.
When you search from the address bar after installing 3D Street View, the extension sets 3dstreetview.com as the default search provider.
Your search terms go into 3dstreetview.com search and suggestion URLs, sent to the vendor endpoint.
- Severity
- Medium unwanted
- Type
- Unexpected
- CWE
- CWE-359
- Source
- Dynamic sandbox
The user searches through the browser address bar.
The extension sets 3dstreetview.com as the default search provider and sends the search terms to the configured vendor endpoints.
- Your search termscoffee shops near me (illustrative)
The words typed into the browser address bar can reveal what the user is looking for.
- Search request URLhttps://3dstreetview.com/admin/public/link?q=coffee%20shops%20near%20me (illustrative)
The configured request URL carries the search terms to the vendor search endpoint.
The claim was confirmed from the extension manifest, which declares a default search provider with search and suggestion URLs on 3dstreetview.com that include the browser's search-term substitution token.
What it can do
Permissions this extension asks for, as declared in version 1.0.0.0. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Read and change your data on 3dstreetview.com
*://3dstreetview.com/*
Store data in your browser
storage
Where it sends data
Destinations our analysis observed 3D Street View contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- 3dstreetview.com
3D Street View sends data to 3dstreetview.com. No other extension we have analysed sends data here.