Is PerfecTab safe?

Low risk

PerfecTab is low risk. A PerfecTab new-tab search routes through under-cover.info before results load, an intermediary URL with partner tags marking PerfecTab a monetized traffic source, then redirects to Yahoo Search (confirmed live, hsimp=yhs-perfecttab2).

Kinner Lake Ltd.v1.0.3Chrome Web Store
17Risk
Who publishes it

Kinner Lake Ltd. - 1 other listing from the same operator, none carrying a finding

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
Kinner Lake Ltd.
Declared legal entity
Kinner Lake Ltd.

Same store account

1 other listing published from this account, 300k+ users between them, none of them carrying a finding.

Shared hosts - 1 hostname

Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.

ressourceapp.com
Also called by 1 other listing: Mystique

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Findings

Search queries routed through monetized intermediary before reaching Yahoo

LowunwantedCWE-359Dynamic sandbox

A PerfecTab new-tab search routes through under-cover.info before results load, an intermediary URL with partner tags marking PerfecTab a monetized traffic source, then redirects to Yahoo Search (confirmed live, hsimp=yhs-perfecttab2).

What actually happens

You did this

You type a search query into the new-tab search box and press Enter.

The extension did this

The extension navigates your tab to under-cover.info with your raw search terms and partner monetization tags before any search engine is contacted.

Parameters p=yhs (Yahoo Hosted Search program) and b=perfecttab (partner branding) are appended to every request.

Captured request

GEThttps://under-cover.info/search.php?p=yhs&b=perfecttab&q=a planted marker value

302 redirect to https://uk.search.yahoo.com/yhs/search?hspart=flowsurf&hsimp=yhs-perfecttab2&p=a planted marker value

The code that does this

Search redirect in func.js

Readable version
// Same code — not obfuscated. The redirect is plaintext in func.js lines 872-877.// p=yhs → Yahoo Hosted Search affiliate program// b=perfecttab → partner/branding tag that credits PerfecTab as the traffic source// The intermediary under-cover.info receives the raw query before the browser reaches any search engine.

Data sent to under-cover.info on every search

  • Your search terms
    how to reset my router password

    The full text of whatever you typed into the search box is sent to the under-cover.info server before you reach a search engine.

  • Partner tracking tag
    b=perfecttab

    A fixed tag (b=perfecttab) identifies this extension as the traffic source, used for affiliate revenue attribution.

  • Search program tag
    p=yhs

    The p=yhs tag enrols the search in the Yahoo Hosted Search monetization program, linking the query to a revenue-sharing arrangement.

Hosts that receive your search terms

    • under-cover.info

    Intermediary that receives raw search terms plus partner tags; applies affiliate attribution and 302-redirects to Yahoo. Operator and data-retention policy not publicly disclosed.

    • uk.search.yahoo.com

    Final search results destination. Receives hsimp=yhs-perfecttab2 identifying PerfecTab as the referral source for Yahoo Hosted Search revenue.

What it can do

Permissions this extension asks for, as declared in version 1.0.3. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read your physical location

    geolocation

  • Store data in your browser

    storage

  • Read the sites you visit most

    topSites

Updated 2 November 2026eflcledgcbkinocjidjjcakgmeidoann