Is Quick Spotify Search: Instant Music & Podcast Finder safe?

Medium risk

Quick Spotify Search sends address-bar searches to chromecrxstore.com while labeling the provider Google.

The extension sets Chrome's default search provider to chromecrxstore.com after installation. Searches typed in the address bar are sent to that domain for results and suggestions, even though the provider name shown in the manifest is Google.

AdBhuT Extensionsv1.0.4Chrome Web Store
45Risk
Who publishes it

AdBhuT Extensions - 3 other listings from the same operator, 3 of them carrying a finding

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
AdBhuT Extensions

Same store account

3 other listings published from this account, 18k+ users between them. 3 of them carry a finding.

Amazon Search Pro: Right-Click, Popup & Omnibox (ALL COUNTRIES!)10k+MediumYouTube Music Web Player Search6k+MediumApple Music(iTunes) Web Player2k+Medium

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Findings

Address-bar searches go to chromecrxstore.com under Google label

Installing Quick Spotify Search sets Chrome's default search provider to chromecrxstore.com endpoints while showing the provider name as Google.

Address-bar search terms and context go to chromecrxstore.com for search and suggestions.

Severity
Medium unwanted
Type
Unexpected
CWE
CWE-359
Source
Dynamic sandbox
What actually happens
You did this

Installs the extension, which automatically changes the default search provider.

The extension did this

Sets Chrome's default search provider to chromecrxstore.com endpoints while naming the provider Google.

Captured request
GETchromecrxstore.com/query/index.html; chromecrxstore.com/suggest.php
Fields in the request
  • Address-bar search text
    spotify playlist ideas (illustrative)

    The words you type into the browser address bar are included in the configured search and suggestion URLs.

  • Search browsing context
    chromecrxstore.com/query/index.html?q=spotify%20playlist%20ideas (illustrative)

    The configured provider can receive the search request as part of the browser's search navigation flow.

What it can do

Permissions this extension asks for, as declared in version 1.0.4. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Add items to the right-click menu

    contextMenus

Where it sends data

Destinations our analysis observed Quick Spotify Search: Instant Music & Podcast Finder contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • chromecrxstore.com

    Quick Spotify Search: Instant Music & Podcast Finder sends data to chromecrxstore.com. 2 other extensions we have analysed send data here.

Updated 30 September 2026hdgadgplbbdjlbjgdociahdlmbglfeen