← Campaigns
Predator Search
Predator Search (50,000 Chrome users) redirects all address-bar searches to predatorwallpaper.com and tags each query with a persistent session ID that is reported to the operator, so remove it and be aware that your search data is tied to a re-identifiable identifier.
- Extensions
- 1
- Stores
- Chrome
- Updated
- 2026-10-03
- Disclosed
- 2026-07-19
- Last observed
- 2026-10-03
Member extensions
1 extension| Extension | Store | Reported versions | Current risk |
|---|---|---|---|
| Predator Searchodkcfoohjiicbelloepgcomekdknchjh | Chrome | Not specified | Unscored |
Indicators
Download STIX →Browse 4 indicators
| Type | Value & evidence |
|---|---|
| domain | predatorwallpaper.comOperator-controlled domain that receives omnibox search queries, start pings, and uninstall pings. |
| url | https://predatorwallpaper.com/search?q={searchTerms}Search provider URL set by the extension, with query placeholder. |
| url | https://predatorwallpaper.com/start?session=Start endpoint where the generated session ID is sent on startup. |
| url | https://predatorwallpaper.com/uninstall?session=Uninstall beacon that reports removal with the same session ID. |