Chrome Web Store
9Versions
3Code reviewed

Caution required

Suspicious in code review

Our reviewer found behaviour consistent with malware, but not enough to confirm it. Treat this extension as untrusted until it has been re-reviewed.

2 high-severity findings in this extension’s code

2 high
1 low
80 indicators
3 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

What our analysis found

Change Default Search Engine, used by 8,000 people, is rated caution by Extension Auditor. Our code review reported 3 findings (2 high, 1 low), led by unauthorized data collection. It comes from a trusted publisher and was last updated in July 2026.

Key findings

  • High

    Unauthorized Data Collection

    The manifest's chrome_settings_overrides.search_provider makes [domain withheld] the browser default (search_url [domain withheld]} and suggest_url [domain withheld]}), so Chrome itself sends both submitted queries and as-you-type omnibox input to the publisher's server. The declarativeNetRequest rule built at lines 33-60 rewrites only that publisher URL, and for the three engines users are most likely to choose (Google, Bing, Yahoo) the substitution keeps the request on [domain withheld] rather than forwarding to the named engine. The user's full search-term stream is therefore collected by the publisher under labels reading "Google"/"Bing"/"Yahoo", while the CWS listing declares no data collection whatsoever.

  • High

    Other

    The bundled manifest requests an additional host permission, [domain withheld], that does not appear in the published CWS manifest summary (which lists only [domain withheld]). That host is the endpoint used by, so the shipped package carries advertising network access the listing does not reflect.

  • Low

    Tracking

    A persistent random UUID (stored as ext_ads_client_id in localStorage) is POSTed with every banner impression and click to [domain withheld], a third-party Cloudflare Worker unrelated to the publisher's stated site or privacy-policy host. The payload itself is minimal (UUID, banner id, timestamp) and carries no browsing or personal data, but it is a persistent per-install identifier sent to an advertising backend for an extension whose CWS listing declares no data collection and never mentions advertising; the banners it serves are affiliate installs for [domain withheld] and [domain withheld] (:21-45).

Analyst notes

The manifest's chrome_settings_overrides.search_provider routes every omnibox query (and as-you-type suggest input) to the publisher's own [domain withheld], and:7-14 keeps the user on that host even when they select "Google", "Bing" or "Yahoo", while the CWS listing declares no data collection at all; the bundle also ships an ad platform (ads-platform/) pushing affiliate-install banners for [domain withheld] / [domain withheld] behind an extra host permission absent from the published manifest summary. Nothing in the code is malicious in the classic sense - no content scripts, no broad host permissions, no remote code, no obfuscation, and the ML regex hits ( JS) resolve to stock jQuery 2.1.4, Select2 4.0.3 and Bootstrap 3.3.6 plus loading bundled files under script-src 'self'; the reviewer reports of a substituted "Skyjem" engine would be server-side behaviour not visible here. The 0.95 ML score and the 100%-malware permhash cluster are not independent corroboration - both trace back to the 2026-09-13 malext-feed label, which states it is not a code review - while the publisher badges and chrome-stats contradict malice; the genuine concerns are the undisclosed search-query routing, the undisclosed ad monetisation, the recorded ownership change, and the scatter of unrelated domains (ext.aitools.band uninstall URL, [domain withheld] policy pages, a Google Doc privacy policy, [domain withheld] ads).

Change Default Search Engine

Change Default Search Engine Chrome extension security report

ID: cfikbclbljhmmokgdokgjhnpinnmihkp

Supported Languages

🇺🇸English

Extension Info & Metadata

Status
Active
Version
3.2.2
Size
1.23 MB
Rating
4.2/5
Reviews
68
Users
8,000
Type
Extension
Updated
Jul 9, 2026
Category
Workflow & planning
Price
Free
Featured
Yes
Visibility
Listed
Mature
No
By Google
No
Trusted
Yes
This publisherTrack record
1extension
All still listed

Publisher Contextual Analysis

Trusted
Author
default-search.site
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
No
Mailbox exists
Yes
Website
Visit
Extensions
1
Active
1
Obsolete
0
Listed
1
Unlisted
0
Users
8,000

Email Change History

1 change
Aug 11, 2024

Screenshots & videos

Screenshot 1

Install growth

Item
Type
Severity
Description
declarativeNetRequest
Permission
Critical
This permission allows the extension to define rules to block, redirect, or modify network requests. Rated Critical because it can control all network traffic, potentially blocking security updates or redirecting to malicious sites.
unlimitedStorage
Permission
Medium
This permission removes storage quota restrictions. Rated Medium because it can store large amounts of user data without limits, potentially impacting browser performance and storing extensive tracking data.
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
https://default-search.site/
Host
Medium
Host permission — access limited to this URL pattern.
https://ext-ads-mvp.captain-products.workers.dev/*
Host
Medium
Host permission — access limited to this URL pattern.
  • 2 high
  • 1 low

The file, code excerpt and explanation behind each finding are part of the full report. No conclusion has been withheld — only the evidence. The verdict above already reflects everything found here.

2 high-severity findings in this extension’s code

2 high
1 low
80 indicators
3 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

About this extension

Easily set your browser's default search engine to Bing, Yahoo, or others with the Change Default Search Engine extension.

Read the publisher’s full description

🔥 Are you looking for an effortless way to customize your browsing experience? With the Change Default Search Engine Chrome extension, you can easily switch your browser's standard web tool to match your preferences. Whether you prefer - Google, - Bing, - Yahoo, - or any other, this tool simplifies the process, providing a seamless experience. 🤔 Why Use Us? 1️⃣ Personalization: Tailor your experience to fit your needs. 2️⃣ Efficiency: Quickly switch between platforms without hassle. 3️⃣ Variety: Choose from a wide range of platforms including Bing and Yahoo. ⭐️ Key Features • User-Friendly Interface: Simple and intuitive design. • Quick Access: Change your default search engine in just a few clicks. • Wide Selection: Supports various platforms including Google, Bing, and Yahoo. 👨‍💻 Top Uses ▸ Research: Set google as default search for diverse results. ▸ Localization: Use region-specific web tools for more relevant results. ▸ Customization: Align your search engine with your personal or professional preferences. 🌐 Easily Change Default Search Engine on Chrome ✅ Are you tired of being locked into one platform? ✅ The Change Default Search Engine Chrome extension offers a simple solution. ✅ Whether you want to change from Yahoo to Google, or set Google as your default search, this tool makes it easy. 📌 Customize Your Browsing Experience ➤ Changing your default search engine in Chrome can enhance your internet experience. ➤ With Change Default Search Engine, you can switch to Bing as search engine or explore other options like Yahoo. ➤ This flexibility allows you to tailor your browsing according to your preferences and needs. 📍 Boost Productivity and Efficiency 🔹 Switch web platform to better align with habits. 🔹 Change Default Search Engine allows for quick switching, saving you time and effort. 🔹 Ideal for those who rely on specific web tools for professional or personal use. 💥 For the Tech-Savvy and the Curious 1. Change default Chrome search engine with just a few clicks. 2. If you're curious about changing default search engine in chrome, this app provides a straightforward guide. 3. It's perfect for users who love to experiment with different technologies and web tools. ⬆️ As we continue to integrate the internet more deeply into our daily lives, having control over how we interact with digital information becomes crucial. The ability to switch your web tool easily means that you can choose the tools that best fit your needs at any moment, whether for a specific project, to enhance privacy, or to simply try out a new service. 🔋 This app not only simplifies the process but also puts the power back in your hands, ensuring that your online experience is as efficient and personalized as possible. 🔎 Seamless Integration and User-Friendly 🔸 Change search engine default settings without disrupting your browsing flow. 🔸 Change Default Search Engine integrates smoothly into your Chrome browser. 🔸 Enjoy a seamless transition to your new web tool, be it Bing, or Yahoo. 🙋‍♂️ Frequently Asked Questions 💡 How to change default search engine in Chrome? 👉 To change the default search engine in Chrome, install our tool, open its settings, select your desired platform, and save the changes. 💡 How to Change Google as Default Search Engine? 👉If you prefer Google as your default search engine, follow these steps: - Open the extension settings. - Select platform from the list. - Apply the modifications. 💡How to Change from Yahoo to Google? 👉 If you want to change search engine to yahoo or don't know how to change bing to google, follow these steps: - Open the extension settings. - Select a web tool from the list. - Apply the modifications. 💡 Is it safe to use this app? 👉 Absolutely. Our extension is verified and secure, ensuring a safe browsing experience. 🆙 Continuous Improvement We regularly update our app, refining its capabilities and adding features based on user feedback. This ensures it remains at the cutting edge of technology. 🌿 Troubleshooting For any questions or suggestions, users can contact us. ⚡️ With our extension, you can take full control of your preferences. Whether you want to use Bing, Yahoo, or any other, this tool makes it simple and efficient. Enhance your browsing experience today by changing chrome default search engine with ease. ✨ Install our app now and enjoy a personalized browsing experience tailored to your needs.

User reviews

Extension files

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

URLs
80

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found
No IP addresses found

2 high-severity findings in this extension’s code

2 high
1 low
80 indicators
3 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe
Version
Size
Verdict
Findings
Permhash
3.2.2
Latest
1.23 MBCaution0
2ef19f9b3e9991790945b38205fe3b2f6baaaf9ec1972c2c2714ef72ef83bac2
3.2.1
1.23 MBCaution0
2ef19f9b3e9991790945b38205fe3b2f6baaaf9ec1972c2c2714ef72ef83bac2
3.0.17
0.37 MBMalicious0
c99f1834e0906fb601d4cd451ba1a530e42035143d7eb3f4f5cf22f750dba807
3.0.16
0.36 MBCaution—
c99f1834e0906fb601d4cd451ba1a530e42035143d7eb3f4f5cf22f750dba807
3.0.15
0.36 MBCaution—
c99f1834e0906fb601d4cd451ba1a530e42035143d7eb3f4f5cf22f750dba807
3.0.14
0.36 MBCaution—
c99f1834e0906fb601d4cd451ba1a530e42035143d7eb3f4f5cf22f750dba807
3.0.13
1.79 MBCaution—
c99f1834e0906fb601d4cd451ba1a530e42035143d7eb3f4f5cf22f750dba807
3.2.0
0.32 MBCaution—
2ef19f9b3e9991790945b38205fe3b2f6baaaf9ec1972c2c2714ef72ef83bac2
3.1.0
0.46 MBCaution—
2ef19f9b3e9991790945b38205fe3b2f6baaaf9ec1972c2c2714ef72ef83bac2
Showing 1 to 9 of 10 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

Gain full insight into all external connections.

Upgrade for full visibility.

Popular in Workflow & Planning