Is Movie Finder safe?

This security report analyses whether Movie Finder is safe to install on your browser. We check Movie Finder for malicious behaviour, data exfiltration, suspicious permissions, and known vulnerabilities so you can decide if Movie Finder is safe for your personal or enterprise fleet.

High risk

Search hijacker that overrides default search engine without clear user consent, redirects searches through third-party monetization infrastructure (moviefindersearch.com), and uses undisclosed cookie manipulation.

75Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Findings

highAI Found

All omnibox search queries routed through moviefindersearch.com with affiliate tracking parameter

manifest.json declares chrome_settings_overrides.search_provider with is_default:true and search_url 'https://www.moviefindersearch.com/search/?category=web&s=dkds&vert=movie&q={searchTerms}'. Every default omnibox search is sent to this domain with affiliate ID s=dkds. The suggest_url also sends partial queries as-you-type to sug.moviefindersearch.com/v1/sug/.

CWE-359high confidence
highAI Found

Extension writes 1-year tracking cookies to moviefindersearch.com domain on install

bg/background.js:65-77 defines writeCookie() which calls chrome.cookies.set() with domain '.moviefindersearch.com', sameSite:'no_restriction', and expirationDate of now+1year. On install (background.js:9-10), it immediately writes 'use_ac' and 'services' (base64-encoded JSON of user movie service preferences). Later calls write 'se' (search engine preference) and 'keep_changes'. These cookies are readable by the moviefindersearch.com website, enabling cross-context user tracking.

CWE-359high confidence
mediumAI Found

Search suggestion queries sent to third-party domain before user completes query

manifest.json declares suggest_url 'https://sug.moviefindersearch.com/v1/sug/?s=dkds&vert=movie&q={searchTerms}'. Chrome calls this URL as-you-type in the omnibox, so partial search queries (keystrokes) are sent before the user presses Enter.

CWE-359high confidence

+2 more findings not shown

Sign up to see all findings
Updated 15 April 2026jdakbaajckankfaadpapgnnlealoigaj