Chrome Web StoreCaution required
Suspicious in code review
Our reviewer found behaviour consistent with malware, but not enough to confirm it. Treat this extension as untrusted until it has been re-reviewed.
2 high-severity findings in this extension’s code
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
What our analysis found
Earth Search for Chrome, used by 60,000 people, is rated caution by Extension Auditor. Our code review reported 3 findings (2 high, 1 medium), led by other. It comes from a publisher with 2 extensions and was last updated in October 2025.
Key findings
- High
Other
is_default:true makes the publisher's PHP endpoint the browser's default search engine, so all omnibox searches are routed through a publisher intermediary, not only queries prefixed with the 'earth' keyword. The store listing states searches are 'Powered by Yahoo' and the popup tells the user it searches Google Earth, neither of which is what the manifest configures, and the empty "name" leaves the engine unidentified in Chrome's search settings. The deception is between what the user is told and what the manifest does.
- High
Unauthorized Data Collection
As the default suggestion provider this endpoint receives partial omnibox input keystroke-by-keystroke, which includes typed URL prefixes and in-progress queries, a browsing-behaviour data category. The destination is first-party, but the publisher's CWS data-collection disclosure is 'none declared' and the listing describes only a search redirect, so this continuous input stream is collected without disclosure.
- Medium
Other
On first install the service worker enumerates all browser windows and force-closes every window of type 'popup'. Nothing in a search-provider extension needs this; it is the behaviour of an install funnel cleaning up the ad or landing popup that drove the installation, and it destroys unrelated popup windows the user owns without any notice.
Analyst notes
The bundled and published manifests match (no permissions, identical web_accessible_resources), so there is no manifest mismatch, but:26-35 makes the publisher's own PHP endpoint the browser's default search engine (is_default:true) with a blank engine name, so every omnibox query, not just 'earth …' keyword queries, is routed to [domain withheld] while the listing claims results are 'Powered by Yahoo' and the popup (:174) tells the user it searches Google Earth via the 'earth' keyword; three mutually contradictory stories about where searches go. The suggest_url makes the same intermediary the default suggestion provider, so partial omnibox input including typed URL prefixes is streamed there although the CWS data-collection disclosure is 'none declared', and:77-82 silently closes every popup-type window on install, behaviour that fits a malvertising install funnel and also destroys unrelated windows the user owns. chrome-stats' search-provider-override flag corroborates; the risk engine's 0.00 and the low publisher risk contradict, but the risk engine only scores permissions and cannot see chrome_settings_overrides, and this extension declares none.
Earth Search for Chrome Chrome extension security report
ID: gamkifgdajnpkdjfnpplogdpjcjbhaif
Supported Languages
Extension Info & Metadata
Publisher Contextual Analysis
- Author
- Watch TV
- Privacy
- Privacy Policy
- MX records exist
- Yes
- Domain exists
- Yes
- Is disposable
- No
- Is role-based
- No
- Mailbox exists
- Yes
- Website
- Visit
Screenshots & videos
Install growth
This extension requests no permissions and has no recorded risk factors.
- 2 high
- 1 medium
The file, code excerpt and explanation behind each finding are part of the full report. No conclusion has been withheld — only the evidence. The verdict above already reflects everything found here.
2 high-severity findings in this extension’s code
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
About this extension
This extension adjusts your browser’s default search provider to yahoo, giving you a quick and seamless way to search the web…
Read the publisher’s full description
This extension adjusts your browser’s default search provider to yahoo, giving you a quick and seamless way to search the web directly from Chrome. With Earth Search for Chrome, you can instantly explore Earth views, satellite imagery, maps, and more — all with rich autosuggestions that make finding what you need faster and easier. Key Features 🌍 Instantly search for Earth & satellite images, maps, terrain views, and more from your address bar. ⚡ Smart autosuggestions to help you find locations, places, and points of interest even quicker. 🌐 Powered by Yahoo for a smooth, dependable search experience. 🛰 Discover new destinations, land formations, and global imagery with ease. Permissions To deliver these features, the extension sets Yahoo as your default search engine so results appear directly from your address bar.
User reviews
Extension files
Browse and explore files within this extension package
Gain full insight into all external connections.
Upgrade for full visibility.
URLs
View the external URLs this extension communicates with to understand its network activity and data interactions.
2 high-severity findings in this extension’s code
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
Gain full insight into all external connections.
Upgrade for full visibility.
Related extensions
More from Watch TV
- Watch TV10,000 users
Popular in Tools
- Montara Chrome Extension639,000,000 users
- 迅雷下载支持87,000,000 users
- Claude19,000,000 users
- Passlit Openbook10,000,000 users
- Zotero Connector9,000,000 users