Is Majestic Mountain Views safe?
Majestic Mountain Views sets an unbranded third-party site as your browser's default search engine and routes every search through it.
This new-tab extension declares chrome_settings_overrides.search_provider with is_default=true, replacing Chrome's default search engine with landscape-extensions.com rather than only powering its own new-tab search box. As a result, searches typed anywhere in the browser -- not just from the new-tab page -- are sent to landscape-extensions.com carrying an install-specific tracking parameter. The extension's store listing describes only a mountain-scenery new-tab page and does not disclose this default-search change.
Who publishes itSyndic8 Asia Pte Ltd - 7 other listings from the same operator, 2 of them carrying a finding
Syndic8 Asia Pte Ltd - 7 other listings from the same operator, 2 of them carrying a finding
What this publisher told the store about itself, and the other listings that told it the same thing.
Same store account
7 other listings published from this account, 260k+ users between them. 2 of them carry a finding.
Shared hosts - 2 hostnames
Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Findings
New-tab extension replaces Chrome's default search with an unbranded proxy
The extension's manifest sets itself as Chrome's default search engine, routing every search you make, address bar or new-tab box, to landscape-extensions.com carrying a per-install tracking id.
The listing never discloses this.
- Severity
- High unwanted
- Type
- Unexpected
- CWE
- CWE-506
- Source
- Static analysis
You install the extension and accept, or do not notice, Chrome's one-time default-search-engine prompt.
This is Chrome's standard confirmation flow for any extension requesting is_default true.
landscape-extensions.com becomes your browser's active default search engine for every search, not just an in-page widget.
The manifest's search_provider entry carries an ext id unique to this install.
manifest.json requests the default-search takeover
The new-tab search box submit handler falls through to the same domain
assets/index-CzmwBIGu.jsconst Ke = "https://landscape-extensions.com/search?ext=ext_3tjvlkpa&q=";// ...jt.addEventListener("submit", o => { o.preventDefault(); const s = h.value.trim(); if (!s) { h.focus(); return; } typeof chrome < "u" && chrome.search && chrome.search.query ? chrome.search.query({ text: s, disposition: "CURRENT_TAB" }) : typeof browser < "u" && browser.search && browser.search.search ? browser.search.search({ query: s }) : window.location.href = `${Ke}${encodeURIComponent(s)}`});- Your search textq=best hiking boots 2026 (illustrative)
The exact query you typed, sent to a domain not named anywhere in the extension's store listing.
- Install tracking idext=ext_3tjvlkpa
A fixed identifier for this install, sent with every search so results and revenue can be attributed back to it.
- landscape-extensions.com
Receives every browser search once set as default provider, tagged with this install's tracking id. Not attributed in-code to a named search provider or syndication partner.
The store description only advertises new-tab mountain photos, with no mention of a default search engine change. The contact, privacy, and terms links point at placeholder domain example.com, not a real vendor page.
Static analysis finding. This behaviour was identified by reading the shipped extension code and has not yet been reproduced in a live run. The trigger conditions and the exact data sent are read from the code, not from an observed capture.
Where it sends data
Destinations our analysis observed Majestic Mountain Views contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- landscape-extensions.com
Majestic Mountain Views sends data to landscape-extensions.com. 5 other extensions we have analyzed send data here.