Is Coupons Search safe?

Medium risk

Coupons Search sets searchext.com as your default search engine, routing every address-bar query through a Yahoo-syndication redirect.

The extension's manifest overrides Chrome's default search provider so address-bar and default searches are sent to searchext.com, which forwards each query to Yahoo as a monetized syndication partner. The full search text is interpolated into the request URL on every default search. A content script on yahoo.com pages also overlays a full-screen 'Extension successfully installed / Click Keep Changes' prompt with looping audio that points the user at Chrome's button to accept the search override.

sunstreamdevv2025.6.55Chrome Web Store
45Risk
Who publishes it

sunstreamdev - 2 other listings from the same operator, none carrying a finding

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
sunstreamdev

Same store account

2 other listings published from this account, 60k+ users between them, none of them carrying a finding.

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Findings

Default search routed through searchext.com to monetized Yahoo syndication

MediumunwantedCWE-359Dynamic sandbox

This extension sets searchext.com as the default search engine.

What actually happens

You did this

You type a search query into the address bar or the extension's toolbar search box and press Enter.

The extension did this

The extension's default-search override sends your query to www.searchext.com, which forwards it to a monetized Yahoo syndication feed.

The query is placed in the p= parameter of a GET request and carries the syndication tags hspart=ssl and hsimp=yhs-003 plus the extension's own affiliate type tag.

Captured request

GEThttps://search.yahoo.com/yhs/search?hspart=ssl&hsimp=yhs-003&type=cs2-popsrc-ch2025.6.55-20260615&q=1&p=canarysearch12345

Search results page served by Yahoo. A separate Yahoo geo beacon recorded c_str1=https%3A%2F%2Fwww.searchext.com%2F, confirming searchext.com as the referrer of the search.

The code that does this

The default-search override is set in the manifest; the handler builds the same searchext.com URL.

Readable version

js/couponsearch.js — performSearch() builds the same searchext.com URL for free-text popup queries

js/couponsearch.js
var performSearch = function (searchString, tabIndex = -1) {  if (searchString) {    isValidHttpUrl(searchString, function (httpCheck) {      new Promise((resolve) => {        if (httpCheck && httpCheck.isResolved !== false) {          chrome.tabs.create({ "url": httpCheck.href });        } else {          let typeParam = ("cs" + searchNumber + "-popsrc-" + (isFirefox ? "FF" : "CH"));          let url = "https://www.searchext.com/search/?hspart=ssl&hsimp=yhs-003&type=" + typeParam + "&q=1&p=" + searchString;          chrome.tabs.create({ "url": url });        }      }, tabIndex);    });  }};

Hosts that receive the search query.

    • www.searchext.com

    Receives the typed query in the p= parameter as the configured default search engine, then redirects to Yahoo.

    • search.yahoo.com

    Yahoo (operated by Yahoo/Apollo Global). Serves the results page via its syndication program (hspart=ssl, hsimp=yhs-003) and records a referrer beacon naming searchext.com.

Observation

Search terms are query strings, not credentials or browsing history. Chrome displays a one-time consent prompt when an extension changes the default search engine; the override only takes effect if that prompt is accepted or kept, and it can be reverted under chrome://settings/search.

What it can do

Permissions this extension asks for, as declared in version 2025.6.55. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on befrugal.com

    *://*.befrugal.com/*

  • Add items to the right-click menu

    contextMenus

  • Run its own code inside the pages you visit

    scripting

  • Store data in your browser

    storage

Where it sends data

Destinations our analysis observed Coupons Search contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • www.searchext.com

    Coupons Search sends data to www.searchext.com. One other extension we have analyzed sends data here.

  • Yahoo (yhs-003 syndication)

    Coupons Search sends data to Yahoo (yhs-003 syndication). Named as a recipient in this extension's own analysis.

Updated 30 September 2026ggcbpfimaefmalaghlnjidgigjdljfng