Is Satellite Earth Maps safe?

Medium risk

Satellite Earth Maps is medium risk. Installing Satellite Earth Maps makes Chrome apply the manifest's default-search override. Address-bar searches go to bestfreemaps.com/search-earth.php with the text in q. The manifest names the provider "Online" and marks it default.

bestfreemaps.comv1Chrome Web Store
45Risk
Who publishes it

bestfreemaps.com - 2 other listings from the same operator, none carrying a finding

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
bestfreemaps.com

Same store account

2 other listings published from this account, 10k+ users between them, none of them carrying a finding.

Shared hosts - 2 hostnames

Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.

earth3dmaps.com
Also called by 3 other listings, including Earth Maps Satellite, Satelliten Earth
bestfreemaps.com
Also called by 4 other listings

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Findings

Address-bar searches routed to BestFreeMaps

MediumunwantedCWE-359Dynamic sandbox

Installing Satellite Earth Maps makes Chrome apply the manifest's default-search override.

What actually happens

You did this

You install Satellite Earth Maps and later search from Chrome's address bar.

The extension did this

The extension configures BestFreeMaps as Chrome's default search provider, so those searches are routed to bestfreemaps.com.

Chrome substitutes your search text into the q parameter of the manifest-declared search URL.

Captured request

GEThttps://bestfreemaps.com/search-earth.php?q={searchTerms}

Manifest-declared search endpoint; Chrome issues a GET request with the typed address-bar search replacing {searchTerms}.

Fields in the search request

  • Your search terms
    satellite map of paris (illustrative)

    The words you type into Chrome's address bar are sent to the search provider before results load.

  • Search endpoint
    https://bestfreemaps.com/search-earth.php?q=satellite%20map%20of%20paris (illustrative)

    Shows which remote service receives the address-bar search query.

  • Provider name
    Online

    This is the search provider label Chrome receives from the extension manifest.

The code that does this

Manifest search-provider override

Readable version

deobfuscated/manifest.json lines 28-37

deobfuscated/manifest.json
"chrome_settings_overrides": {    "search_provider": {        "name": "Online",        "keyword": "Eearth Maps Search",        "favicon_url": "https://bestfreemaps.com/ext.png",        "search_url": "https://bestfreemaps.com/search-earth.php?q={searchTerms}",        "encoding": "UTF-8",        "instant": true,        "is_default": true    }}

Destination for address-bar searches

    • bestfreemaps.com

    Receives Chrome address-bar search queries through /search-earth.php with the query text in the q parameter.

What it can do

Permissions this extension asks for, as declared in version 1. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Store data in your browser

    storage

Updated 30 September 2026gakmegiabfkcldknhpamdcflkofdpljk