Is Qui-Quo safe?

Medium risk

Qui-Quo fetches server-selected content scripts and hot-patch code that can run on any site.

Qui-Quo periodically downloads a content-script manifest from extension.qui-quo.ru and injects the listed scripts into matching tabs with all-URLs access. The same manifest can name bug-fix JavaScript that the extension fetches and executes at document start in those pages. This lets the server change what code runs in pages and what page data that code can read, including URLs, page content, and form fields.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

Qui-Quov2.2.3Firefox Add-ons
43Risk
Who publishes it

Qui-Quo - no other listings under this identity, 30 shared hostnames

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
Qui-Quo

Shared hosts - 30 hostnames

Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.

cruisescanner.ru
Also called by 1 other listing
cyprusflightpass.gov.cy
Also called by 1 other listing
dmsu.gov.ua
Also called by 1 other listing
erp.karpaten.ro
Also called by 1 other listing
export.bgoperator.ru
Also called by 1 other listing
geograftour.com
Also called by 1 other listing
gettransfer.com
Also called by 1 other listing
hbpro.expert
Also called by 1 other listing
help.qui-quo.support
Also called by 1 other listing
hotels-geo-suggest.tutu.ru
Also called by 1 other listing
itaka.pl
Also called by 1 other listing
kolomna-turktv.ru
Also called by 1 other listing
library.sunmar.ru
Also called by 1 other listing: XO Pulse
online.plantravel.ru
Also called by 1 other listing: XO Pulse
agency.sanatory.ru
Also called by 2 other listings, including Qui-Quo
agent.anextour.com
Also called by 2 other listings
agent.sletat.ru
Also called by 2 other listings
agent.tours.ua
Also called by 2 other listings, including Qui-Quo
api-crs.vodohod.com
Also called by 2 other listings
api.asialuxe.app
Also called by 2 other listings
apigate-tui.fstravel.com
Also called by 2 other listings, including Qui-Quo
apigate.fstravel.com
Also called by 2 other listings, including Qui-Quo
cp.traveltainment.de
Also called by 2 other listings, including All-Inclusive CRM
intercity.by
Also called by 2 other listings, including All-Inclusive CRM
laspi.com
Also called by 2 other listings: XO Pulse, All-Inclusive CRM
miramar.turhome.com
Also called by 2 other listings: XO Pulse, All-Inclusive CRM
travelsoft.ru
Also called by 2 other listings
account.mail.ru
Also called by 3 other listings, including Счетчик писем Mail
files.anextour.com
Also called by 3 other listings
ittour.com.ua
Also called by 4 other listings

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 2.2.3. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on every site you visit

    <all_urls>

  • Show you desktop notifications

    notifications

  • Store data in your browser

    storage

  • Store an unlimited amount of data in your browser

    unlimitedStorage

  • See the address and title of every tab you have open

    tabs

  • Write to your clipboard

    clipboardWrite

declarativeNetRequestWithHostAccess

Where it sends data

Destinations our analysis observed Qui-Quo contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • extension.qui-quo.ru

    Qui-Quo sends data to extension.qui-quo.ru. No other extension we have analysed sends data here.

Updated 30 September 2026amo-644984