Is PerfecTab safe?

High risk

PerfecTab is high risk. A PerfecTab new-tab search routes through under-cover.info before results load, an intermediary URL with partner tags marking PerfecTab a monetized traffic source, then redirects to Yahoo Search (confirmed live, hsimp=yhs-perfecttab2).

Kinner Lake Ltd.v1.0.3Chrome Web Store
75Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Findings

SeverityHIGH
ClassUNWANTED
TypeUnexpected
CWECWE-359
SourceAI SANDBOX

Search queries routed through monetized intermediary before reaching Yahoo

A PerfecTab new-tab search routes through under-cover.info before results load, an intermediary URL with partner tags marking PerfecTab a monetized traffic source, then redirects to Yahoo Search (confirmed live, hsimp=yhs-perfecttab2).

01EvidenceCAUSE EFFECT
What actually happens
You did this

You type a search query into the new-tab search box and press Enter.

The extension did this

The extension navigates your tab to under-cover.info with your raw search terms and partner monetization tags before any search engine is contacted.

Parameters p=yhs (Yahoo Hosted Search program) and b=perfecttab (partner branding) are appended to every request.

02EvidenceNETWORK CAPTURE
Captured request
GEThttps://under-cover.info/search.php?p=yhs&b=perfecttab&q=a planted marker value
302 redirect to https://uk.search.yahoo.com/yhs/search?hspart=flowsurf&hsimp=yhs-perfecttab2&p=a planted marker value
03EvidenceCODE COMPARE
The code that does this

Search redirect in func.js

What it actually does
// Same code — not obfuscated. The redirect is plaintext in func.js lines 872-877.
// p=yhs → Yahoo Hosted Search affiliate program
// b=perfecttab → partner/branding tag that credits PerfecTab as the traffic source
// The intermediary under-cover.info receives the raw query before the browser reaches any search engine.
04EvidenceFIELD TABLE
Data sent to under-cover.info on every search
FieldValueWhy it matters
Your search terms
how to reset my router passwordThe full text of whatever you typed into the search box is sent to the under-cover.info server before you reach a search engine.
Partner tracking tag
b=perfecttabA fixed tag (b=perfecttab) identifies this extension as the traffic source, used for affiliate revenue attribution.
Search program tag
p=yhsThe p=yhs tag enrols the search in the Yahoo Hosted Search monetization program, linking the query to a revenue-sharing arrangement.
05EvidenceTHIRD PARTY LIST
Hosts that receive your search terms
  • under-cover.info

    Intermediary that receives raw search terms plus partner tags; applies affiliate attribution and 302-redirects to Yahoo. Operator and data-retention policy not publicly disclosed.

  • uk.search.yahoo.com

    Final search results destination. Receives hsimp=yhs-perfecttab2 identifying PerfecTab as the referral source for Yahoo Hosted Search revenue.

Updated 17 September 2026eflcledgcbkinocjidjjcakgmeidoann