Chrome Web StoreCaution required
Suspicious in code review (v1.0.5)
Our reviewer found behaviour consistent with malware in version 1.0.5, but not enough to confirm it. Treat this extension as untrusted until it has been re-reviewed.
247 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
What our analysis found
Search Rewards, used by 2,000 people, is rated caution by Extension Auditor. Our code review reported 1 finding (1 high), led by other. It comes from a trusted publisher and was last updated in May 2024.
Key findings
- High
Other
The bundled manifest for 1.0.5 (confirmed as item_version 1.0.5 by the signed) grants host_permissions only for [domain withheld], but the live Chrome Web Store listing for this item declares an extra host, [domain withheld], which appears nowhere in any file in this bundle. The shipped build therefore holds broader host access than the code I was able to review, and whatever exercises that host is unreviewed. The gap is widened by three signed popup bundles (, main., main.) that are listed in but absent from the extract.
Analyst notes
The reviewed 1.0.5 code does only what the listing discloses: polls [domain withheld] for a uid, opens [domain withheld] reward pages on popup messages, and the popup () fetches the signed-in user's points from [domain withheld]; reads the Bing `q` param but transmits only an ad-presence boolean ('bing-search:1'/'0'), never the query text. The only substantive issue is a manifest mismatch: the bundled manifest declares host_permissions ['[domain withheld]'] while the live CWS listing for this same item declares an additional '[domain withheld]' — and confirms this bundle really is item_version 1.0.5, so the shipped build differs from what I could read. Coverage is also incomplete: the signed file list names, main. and main., none of which are present in the extract directory (~150 KB of the model's 1,156,020 JS bytes unaccounted for). chrome-stats' likelihood contradicts the ML score; the malext-feed 'malware' note and the publisher-malicious flag are the same external import rather than independent corroboration, and the 9%-flagged permhash cluster is weak support.
Search Rewards Chrome extension security report
ID: pflehjknninehfghakckeppppkjohdkk
Supported Languages
Extension Info & Metadata
Publisher Contextual Analysis
- Author
- https://search-rewards.com/
- Privacy
- Privacy Policy
- MX records exist
- Yes
- Domain exists
- Yes
- Is disposable
- No
- Is role-based
- No
- Mailbox exists
- Yes
- Website
- Visit
Screenshots & videos
Install growth
247 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
About this extension
Get rewards for using your browser, participate in draws and win prizes with Search Rewards extension.
Read the publisher’s full description
Add Search Rewards and monetize your browser. Do you want to receive free gift cards of your favorite brands every month? Simply use our Internet search through the reward system to earn attractive prizes. Earn rewards from both Microsoft and our platform simultaneously. By clicking "Add to chrome", I accept and agree to installing Search Rewards extension and setting search engine to Microsoft Bing that provided by the service, Terms of Use and Privacy Policy. This extension changes your search engine to Microsoft Bing. Terms of Use: https://search-rewards.com/eula Privacy Policy: https://search-rewards.com/privacy-policy About: https://search-rewards.com/about You will receive points for your search activity. Exchange points for participation in monthly draws. The most active 100 participants will receive additional prizes! Collect points in the background doing your own thing while you study, work, watch the news, shop and surf the Internet. The more points you accumulate, the higher your chances of winning these fantastic rewards. Invite your friends and earn even more points thanks to the referral program. Earn 10% of all points accumulated by users you refer through our referral program. Explore our extensive catalog of gift cards, ranging from popular retailers to online services. Customize your reward experience by choosing the gift cards that best suit your preferences. Join the Search Rewards community today and transform your online experience into a rewarding journey!
User reviews
Extension files
Browse and explore files within this extension package
Gain full insight into all external connections.
Upgrade for full visibility.
URLs
View the external URLs this extension communicates with to understand its network activity and data interactions.
247 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
Code Diff
Compare extension code between any two versions.
0 changed files detected
No comparable text files found between these versions.
Gain full insight into all external connections.
Upgrade for full visibility.
Related extensions
Popular in Entertainment
- Microsoft Edge Flash Player23,479,120 users
- Netflix Party is now Teleparty10,000,000 users
- Netflix Party is now Teleparty2,359,777 users
- Microsoft Multimedia Redirection1,232,737 users
- Watch2Gether1,000,000 users