Is Coupons Search safe?

Medium risk

Coupons Search sets searchext.com as your default search engine, routing every address-bar query through a Yahoo-syndication redirect.

The extension's manifest overrides Chrome's default search provider so address-bar and default searches are sent to searchext.com, which forwards each query to Yahoo as a monetized syndication partner. The full search text is interpolated into the request URL on every default search. A content script on yahoo.com pages also overlays a full-screen 'Extension successfully installed / Click Keep Changes' prompt with looping audio that points the user at Chrome's button to accept the search override.

sunstreamdevv2025.6.55Chrome Web Store
45Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Findings

SeverityMEDIUM
ClassUNWANTED
TypeUnexpected
CWECWE-359
SourceAI SANDBOX

Default search routed through searchext.com to monetized Yahoo syndication

This extension sets searchext.com as the default search engine.

Searches from the address bar or popup route through www.searchext.com to a monetized Yahoo feed carrying its own affiliate tag.

A marker query reached Yahoo verbatim, tagged.

01EvidenceCAUSE EFFECT
What actually happens
You did this

You type a search query into the address bar or the extension's toolbar search box and press Enter.

The extension did this

The extension's default-search override sends your query to www.searchext.com, which forwards it to a monetized Yahoo syndication feed.

The query is placed in the p= parameter of a GET request and carries the syndication tags hspart=ssl and hsimp=yhs-003 plus the extension's own affiliate type tag.

02EvidenceNETWORK CAPTURE
Captured request
GEThttps://search.yahoo.com/yhs/search?hspart=ssl&hsimp=yhs-003&type=cs2-popsrc-ch2025.6.55-20260615&q=1&p=canarysearch12345
Search results page served by Yahoo. A separate Yahoo geo beacon recorded c_str1=https%3A%2F%2Fwww.searchext.com%2F, confirming searchext.com as the referrer of the search.
03EvidenceCODE COMPARE
The code that does this

The default-search override is set in the manifest; the handler builds the same searchext.com URL.

What it actually does
js/couponsearch.js — performSearch() builds the same searchext.com URL for free-text popup queriesjs/couponsearch.js
var performSearch = function (searchString, tabIndex = -1) {
  if (searchString) {
    isValidHttpUrl(searchString, function (httpCheck) {
      new Promise((resolve) => {
        if (httpCheck && httpCheck.isResolved !== false) {
          chrome.tabs.create({ "url": httpCheck.href });
        } else {
          let typeParam = ("cs" + searchNumber + "-popsrc-" + (isFirefox ? "FF" : "CH"));
          let url = "https://www.searchext.com/search/?hspart=ssl&hsimp=yhs-003&type=" + typeParam + "&q=1&p=" + searchString;
          chrome.tabs.create({ "url": url });
        }
      }, tabIndex);
    });
  }
};
04EvidenceTHIRD PARTY LIST
Hosts that receive the search query.
  • www.searchext.com

    Receives the typed query in the p= parameter as the configured default search engine, then redirects to Yahoo.

  • search.yahoo.com

    Yahoo (operated by Yahoo/Apollo Global). Serves the results page via its syndication program (hspart=ssl, hsimp=yhs-003) and records a referrer beacon naming searchext.com.

05EvidencePLAIN NOTE
Observation

Search terms are query strings, not credentials or browsing history. Chrome displays a one-time consent prompt when an extension changes the default search engine; the override only takes effect if that prompt is accepted or kept, and it can be reverted under chrome://settings/search.

Data recipients

www.searchext.comYahoo (yhs-003 syndication)
Updated 17 September 2026ggcbpfimaefmalaghlnjidgigjdljfng