Is Визуальные закладки safe?

Clean risk

Визуальные закладки sends the user's most-visited URLs to Mail.ru's tile-metadata backend on every new-tab open.

Each time a new tab is opened, the extension calls chrome.topSites.get() and forwards each of the user's top-visited URLs to data-ntp.browser.mail.ru to fetch tile thumbnails, without requiring authentication. Alongside this, a telemetry beacon is sent to stat.browser.mail.ru on every new-tab open, carrying a browser GUID, extension ID, Chrome version, and UI interaction events. An ad-targeting pixel is also fetched daily to ad.mail.ru and pulse-ad.mail.ru with browser cookies included.

mail.ruv7.2.6Chrome Web Store
3Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 7.2.6. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on covid.atom.qsoa.cloud

    https://covid.atom.qsoa.cloud/

  • Read and change your data on cdnmail.ru

    *://*.cdnmail.ru/*

  • Read and change your data on imgsmail.ru

    *://*.imgsmail.ru/*

  • Read and change your data on mail.ru

    *://*.mail.ru/*

  • Read and change your data on ok.ru

    *://*.ok.ru/*

  • Read and change your data on userapi.com

    *://*.userapi.com/*

  • Read and change your data on vk.com

    *://*.vk.com/*

  • Schedule its own background tasks

    alarms

  • Store data in your browser

    storage

  • See the address and title of every tab you have open

    tabs

  • Read the sites you visit most

    topSites

  • Watch every request your browser makes

    webRequest

  • Read and change cookies, including the ones that keep you signed in

    cookies

  • Talk to a program installed on your computer, outside the browser's sandbox

    nativeMessaging

Where it sends data

Destinations our analysis observed Визуальные закладки contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • ad.mail.ru

    Визуальные закладки sends data to ad.mail.ru. One other extension we have analysed sends data here.

  • data-ntp.browser.mail.ru

    Визуальные закладки sends data to data-ntp.browser.mail.ru. No other extension we have analysed sends data here.

  • pulse-ad.mail.ru

    Визуальные закладки sends data to pulse-ad.mail.ru. No other extension we have analysed sends data here.

  • stat.browser.mail.ru

    Визуальные закладки sends data to stat.browser.mail.ru. No other extension we have analysed sends data here.

Updated 21 September 2026lbklnemjebnacdgfdbclbcpfocmgilgn