Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: SearchLock Tab

CRITICAL RISKRemoved from Chrome Web Store

SearchLock Tab

ID: ohdphinnjkbfgimbcpdjdigbbkmngcge

Could be malicious

Supported Languages

🇺🇸English

Extension Info & Metadata

Status

Removed

Version

1.0.2

Size

0.27 MB

Rating

4.2/5

Reviews

Users

10,000

Type

Extension

Updated

Dec 10, 2022

Publisher Contextual Analysis

Trusted

Author: https://searchlock.comView Profile
Privacy: Privacy Policy
Help: Help Center
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: Yes
Mailbox exists: Yes
Website: Visit

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

115,956

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Privacy-enhancing search engine new tab page.

Search the web without being tracked from your new tab page! SearchLock Tab adds a privacy-friendly SearchLock search box to your browser's new tab page. When you use SearchLock, you can rest easy knowing that: • We don't track you in or out of private mode. • We don’t ask for or store your personal information. • We don't associate your searches with your personal information since we never ask for it in the first place. • We don't follow you with ads. -------------------- Extension Features: -------------------- - Updates your Chrome new tab page to show a privacy-friendly search box from SearchLock. - Use your SearchLock Tab page to search the web privately, without being tracked or profiled for advertising. Privacy policy: https://www.searchlock.com/pages/privacy Thanks for using SearchLock Tab! Get in touch with us any time at https://www.searchlock.com/support Adding this extension to Chrome sets your new tab page to SearchLock Tab.

User Growth

Showing data from Dec 11, 2022 to Dec 10, 2023

Versions

-50%(-10,000 users)

Compared to 3 months ago

1 version released in this period

Rating Count

Total: 87 ratings

Average Rating

Current: 4.24 / 5.0

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical1

High4

Medium2

Low0

Versions scanned

Showing 1 of 1 scanned version with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1.0.2 Code review	7

Extension Version	Code Review Findings
1.0.2	7

Files with findings

2 distinct paths — top paths by unique finding count:

js/background.js4
js/contentScripts.js3

S.No.	Category	Severity	File	Summary	Found in Version
1	Remote Code Loading	critical	js/background.js (line 31)	The extension fetches a remote configuration (`dynamic_redirect_params`) from the developer's server on every startup and every 12 hours (720-minute alarm). These server-controlled parameters are then used to dynamica…	1.0.2
2	Network Interception	high	js/background.js (line 220)	Dynamic declarativeNetRequest rules are installed at runtime using parameters fetched from a remote server, silently appending or replacing query parameters on every search request to searchlock.com. Because the param…	1.0.2
3	Privilege Escalation	high	js/contentScripts.js (line 30)	The content script listens for window.postMessage events from any subdomain of searchlock.com and, upon receipt, stores arbitrary `pbParams` objects from the remote page into chrome.storage.sync and forwards them to t…	1.0.2
4	Tracking	high	js/contentScripts.js (line 7)	A hidden iframe is silently injected into every page on *.searchlock.com, pinging a remote attribution endpoint with a persistent unique user alias, extension ID, and version. The iframe has display:none to avoid any …	1.0.2
5	Unauthorized Data Collection	high	js/contentScripts.js (line 69)	The ident() function injects a hidden DOM element into every searchlock.com page containing the user's persistent alias (GUID), install date offset (days since install), extension ID and version — encoded as data attr…	1.0.2
6	Data Exfiltration	medium	js/background.js (line 260)	Internal error messages are silently transmitted to the developer's server along with the OS, browser type, and app ID. While error logging itself is common, the unconditional exfiltration of error message strings (wh…	1.0.2
7	Unauthorized Data Collection	medium	js/background.js (line 112)	The extension reads the user's top browsing sites via chrome.topSites and persists them to chrome.storage.sync (which syncs across all of the user's Chrome profiles). The full topSites list is also returned to the new…	1.0.2

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


www.${domain}`	-	https://www.${domain}`
dev.${domain}`;	-	https://dev.${domain}`;
www.searchlock.com	-	https://www.searchlock.com
www.searchlock.com	/about	https://www.searchlock.com/about
www.searchlock.com	/support	https://www.searchlock.com/support
results.searchlock.com	/search/	https://results.searchlock.com/search/
www.searchlock.com	/pages/eula	https://www.searchlock.com/pages/eula
www.searchlock.com	/pages/privacy	https://www.searchlock.com/pages/privacy
www.w3.org	/1999/02/22-rdf-syntax-ns	http://www.w3.org/1999/02/22-rdf-syntax-ns#
ns.adobe.com	/xap/1.0/mm/	http://ns.adobe.com/xap/1.0/mm/

Showing 1 to 10 of 30 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No IP addresses found

4.5 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

Sometimes it does show in address bar that my searches are secure.

Thomas Price·13 Aug 2018

echt cool

Bernhard Sch.·25 Jul 2018

echt cool

Bernhard·25 Jul 2018

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

SearchLock Tab

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 1 Version7

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating