Is View Maps & Directions safe?

High risk

View Maps & Directions replaces the default search engine with viewmapsdirections.com, routing all browser searches and autocomplete requests through its server.

When installed, the extension sets viewmapsdirections.com as the browser's default search engine via a manifest-level override. Every search query typed in the omnibox, along with live autocomplete keystrokes, is sent to viewmapsdirections.com rather than the user's previously configured search provider. The background service worker also monitors tab navigations to the search URL and appends tracking parameters.

View Maps & Directionsv1.0.0.1Chrome Web Store
72Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Findings

Search engine replaced with viewmapsdirections.com operator server

Dynamic analysis showed installing this extension replaces your search engine with one run by viewmapsdirections.com, which routes searches to Yahoo via affiliate link.

Keystrokes go to its autosuggest endpoint; undisclosed on the Store.

Severity
High unwanted
Type
Unexpected
CWE
CWE-200
Source
Dynamic sandbox
What actually happens
You did this

You type a search query into the browser address bar.

This happens on every search, no special page or action required.

The extension did this

The query is transmitted to viewmapsdirections.com before reaching any search engine.

The operator server redirects to Yahoo Search via an Infospace affiliate link, passing the plaintext query as a URL parameter.

Captured request
GEThttps://viewmapsdirections.com/admin/public/link?q=test_search_BIRD_12345

302 redirect to uk.search.yahoo.com/yhs/search with Infospace affiliate parameters and plaintext query p=test_search_BIRD_12345 in the URL.

Data sent with each search request
  • Your search query
    how to reset password gmail

    The full text of what you searched for is sent to the operator server in the URL.

  • Partial keystrokes (autocomplete)
    how to reset pa

    As you type, each partial query is sent to the server for live suggestions, before you finish typing.

  • Selected map provider preference
    selectedMap=Google

    The extension appends your stored map provider choice (e.g. Google) to the search URL.

The code that does this

Manifest declares viewmapsdirections.com as default search engine

Readable version
// manifest.json — chrome_settings_overrides causes Chrome to treat// viewmapsdirections.com as the default search provider browser-wide.// is_default=true means all omnibox searches go through the operator server.// suggest_url sends partial keystrokes for live autocomplete suggestions."chrome_settings_overrides": {  "search_provider": {    "name": "Online",    "keyword": "ViewMapsDirections",    "search_url": "https://viewmapsdirections.com/admin/public/link?q={searchTerms}",    "suggest_url": "https://viewmapsdirections.com/admin/public/autosuggest?searchTerm={searchTerms}",    "favicon_url": "https://viewmapsdirections.com/admin/public/favicon.ico",    "encoding": "UTF-8",    "is_default": true  }}
Hosts that receive search query data
    • viewmapsdirections.com

    Operator server. Receives every search query and autocomplete keystroke; redirects to Yahoo Search via affiliate link.

    • uk.search.yahoo.com

    Yahoo Search via Infospace affiliate program. Receives the plaintext query as URL parameter p=<query> after the operator redirect.

What it can do

Permissions this extension asks for, as declared in version 1.0.0.1. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on viewmapsdirections.com

    *://viewmapsdirections.com/*

  • Store data in your browser

    storage

Where it sends data

Destinations our analysis observed View Maps & Directions contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • viewmapsdirections.com

    View Maps & Directions sends data to viewmapsdirections.com. No other extension we have analysed sends data here.

Updated 30 September 2026pjbkppdckhokepdfnlfmljjgnbnjfabg