Is Shiftsearch safe?
Shiftsearch sends every URL you visit plus a persistent device ID to pass.work.ink, then redirects the tab to a server-chosen destination.
A content script running on every site base64-encodes each http(s) page you open and forwards it to pass.work.ink along with a persistent random fingerprint and which adblocker you have installed; the server's response can navigate your tab anywhere it chooses. The extension also rewrites Google searches, replacing your query with a redirect to easysearch.cc (or another configured engine) without any action from you. In the background it polls every few seconds to detect uBlock Origin, AdBlock Plus, and AdGuard and stores which one is present.
Who publishes itLuca Drescher - no other listings under this identity
Luca Drescher - no other listings under this identity
What this publisher told the store about itself, and the other listings that told it the same thing.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
What it can do
Permissions this extension asks for, as declared in version 3.0.2. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Store data in your browser
storage
See the address and title of every tab you have open
tabs
See, disable and uninstall your other extensions, including your security ones
management
Where it sends data
Destinations our analysis observed Shiftsearch contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- pass.work.ink
Shiftsearch sends data to pass.work.ink. 2 other extensions we have analyzed send data here.
- easysearch.cc
Shiftsearch sends data to easysearch.cc. No other extension we have analyzed sends data here.