Is Trusted Browse safe?

Medium risk

Trusted Browse overrides the default search engine and redirects Google and Bing searches to a Yahoo-affiliate proxy.

The extension replaces the default search engine with trustedbrowsesearch.com and adds declarativeNetRequest rules that intercept navigations to Google and Bing search results, redirecting them to the vendor's SERP before those pages load. Every intercepted search query is forwarded to trustedbrowsesearch.com with the affiliate parameter s=pzpr appended. A content script running on trustedbrowsesearch.com signals successful installation back to the vendor by injecting a CSS class into the page.

Martyn Bakerv3.0.4Chrome Web Store
45Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Findings

SeverityMEDIUM
ClassUNWANTED
TypeUnexpected
CWECWE-506
SourceAI SANDBOX

Trusted Browse routes searches through its own search page

Trusted Browse sets trustedbrowsesearch.com as the default search provider.

It also ships redirect rules for Google and Bing searches, sending them to www.trustedbrowsesearch.com/search/ with the search phrase and a pzpr source parameter.

01EvidenceCAUSE EFFECT
What actually happens
You did this

You install Trusted Browse or open a matching Google or Bing search URL.

The redirect rules apply to top-level Google and Bing search-result navigations.

The extension did this

The extension sends the search to trustedbrowsesearch.com instead of leaving it on the original search page.

The target URL includes the searched phrase and the pzpr source parameter.

02EvidenceFIELD TABLE
Fields visible in the vendor search URL
FieldValueWhy it matters
Search phrase
helloThis reveals what you typed into search when the rule or default provider handles the query.
Search page URL
https://www.trustedbrowsesearch.com/search/?category=web&s=pzpr&vert=private&q=helloThis shows the destination that receives your search instead of the search page you started from.
Source parameter
s=pzprThis attaches the request to a specific extension distribution or affiliate source.
Search category
category=web&vert=privateThis adds context about how the vendor search page should handle the query.
03EvidenceNETWORK CAPTURE
Captured request
GEThttps://www.trustedbrowsesearch.com/search/?category=web&s=pzpr&vert=private&q=hello
Redirect target for a Google search navigation; GET request has no body.
04EvidenceCODE COMPARE
The code that does this

The manifest makes the vendor page the default search provider

What it actually does
Search-provider override and enabled redirect rulesmanifest.json
{
  "chrome_settings_overrides": {
    "search_provider": {
      "encoding": "UTF-8",
      "favicon_url": "https://www.trustedbrowsesearch.com/favicon.ico",
      "is_default": true,
      "name": "Trusted",
      "keyword": "Trusted Browse",
      "search_url": "https://www.trustedbrowsesearch.com/search/?category=web&s=pzpr&vert=private&q={searchTerms}",
      "suggest_url": "https://sug.trustedbrowsesearch.com/v1/sug/?yid=pzpr&ssv=2&vert=private&q={searchTerms}"
    }
  },
  "declarative_net_request": {
    "rule_resources": [
      {
        "id": "rules",
        "enabled": true,
        "path": "rules.json"
      }
    ]
  }
}
05EvidenceCODE COMPARE
The code that does this

Redirect rules copy Google and Bing search terms into the vendor URL

What it actually does
Google and Bing main-frame redirect rulesrules.json
[
  {
    "id": 1,
    "priority": 1,
    "action": {
      "type": "redirect",
      "redirect": {
        "regexSubstitution": "https://www.trustedbrowsesearch.com/search/?category=web&s=pzpr&vert=private&q=\\2"
      }
    },
    "condition": {
      "regexFilter": "(^.*?bing.com\\/search\\?q=)([^&]*)(.*)(.*)\\&FORM=([^&]*)(.*)",
      "resourceTypes": [
        "main_frame"
      ]
    }
  },
  {
    "id": 2,
    "priority": 1,
    "action": {
      "type": "redirect",
      "redirect": {
        "regexSubstitution": "https://www.trustedbrowsesearch.com/search/?category=web&s=pzpr&vert=private&q=\\2"
      }
    },
    "condition": {
      "regexFilter": "(^.*?google.com\\/search\\?q=)([^&]*)(.*)(.*)\\&sourceid=([^&]*)(.*)",
      "resourceTypes": [
        "main_frame"
      ]
    }
  }
]
06EvidenceTHIRD PARTY LIST
Search endpoints named by the extension
  • www.trustedbrowsesearch.com

    Receives default searches and redirected Google or Bing search navigations at /search/.

  • sug.trustedbrowsesearch.com

    Receives search-suggestion requests configured by the manifest search provider.

Data recipients

www.trustedbrowsesearch.com
Updated 17 September 2026glhfmfaokimipghepdllgchpjbdjfpbb