Is QuickSearch - חיפוש בטוח safe?
QuickSearch - חיפוש בטוח silently overrides the default search engine and homepage to redirect searches to quicksearch.pro.
The extension uses manifest-level chrome_settings_overrides to set the homepage, startup pages, and default search provider to quicksearch.pro without surfacing this to the user. Every search query typed in the address bar is routed to www.quicksearch.pro/result.php, along with the visited URL context. The extension's name ('Safe Search') does not disclose these redirect behaviors.
Rated medium risk because of who publishes it: 1 of the 2 other listings from the same operator is rated high or critical for malicious behavior. Flagged: Pinukim - חיפוש סרטים וסדרות (high).
Who publishes itGet Play LTD - 2 other listings from the same operator, 1 of them carrying a finding
Get Play LTD - 2 other listings from the same operator, 1 of them carrying a finding
What this publisher told the store about itself, and the other listings that told it the same thing.
Same store account
2 other listings published from this account, 39k+ users between them. 1 of them carries a finding.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Findings
QuickSearch reroutes every browser search to quicksearch.pro
QuickSearch sets the browser's default search, homepage, and startup page to quicksearch.pro on install via manifest overrides, no consent prompt.
A test query reached www.quicksearch.pro/result.php in q=, re-querying Google ads.
What actually happens
You type a search term into the browser's address bar and press Enter.
You expect the query to go to your chosen default search engine.
The browser sends your query to www.quicksearch.pro/result.php instead, because the extension made quicksearch.pro the default search engine.
The override was set at install time through the extension manifest, so it applies to every address-bar search without any further interaction.
The code that does this
The manifest declares quicksearch.pro as the forced default search, homepage, and startup page
What this declaration does
// On install, the browser applies these overrides with no code execution:// - Default search engine -> https://www.quicksearch.pro/result.php?q={searchTerms}// - Suggestions endpoint -> https://www.quicksearch.pro/result.php?q={searchTerms}// - Homepage -> https://www.quicksearch.pro/// - Browser startup page -> https://www.quicksearch.pro/// is_default:true forces quicksearch.pro ahead of the user's existing default.// Every address-bar query is routed to quicksearch.pro as the q= parameter.Captured request
HTTP 200. The page re-queries a Google custom search engine with the same term and loads googleadservices and google-analytics scripts, consistent with a monetized search-redirect page. (Observed during dynamic analysis: a planted marker term was carried verbatim in the q= parameter, confirming the search term reaches quicksearch.pro.)
What quicksearch.pro receives on every search
- Your search termq=apartment+rental+tel+aviv
The exact text you type into the address bar is sent as the q= query parameter.
- Your search activityresult.php?q=<each query you type>
Because every address-bar search is routed here, quicksearch.pro receives a running record of what you search for over time.
Where searches and their downstream traffic go
- www.quicksearch.pro
Receives every address-bar search term as the q= parameter; set as default search engine, homepage, and startup page by the extension manifest.
- googleadservices.com
Google advertising; loaded by the quicksearch.pro results page, consistent with search-redirect monetization.
- www.google-analytics.com
Google analytics; loaded by the quicksearch.pro results page.
The code that does this
On install the extension closes its own Web Store tab and points the uninstall page at google.com
What this does
// On install:// 1. closeWindow() finds and closes the Chrome Web Store detail tab for this// extension, removing the listing the user could return to.// 2. setUninstallURL('https://www.google.com') opens google.com when the// extension is removed, rather than a vendor page tied to quicksearch.pro.What it can do
Permissions this extension asks for, as declared in version 1.5.2. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
See the address and title of every tab you have open
tabs
Where it sends data
Destinations our analysis observed QuickSearch - חיפוש בטוח contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- www.quicksearch.pro
QuickSearch - חיפוש בטוח sends data to www.quicksearch.pro. No other extension we have analyzed sends data here.