Is Google Reverse Image Search safe to use?

Google Reverse Image Search has a security risk score of 66.83/100 (HIGH risk). Our security analysis detected 135 findings. Review the detailed security assessment below to understand the specific risks before installation.

What are the security risks of Google Reverse Image Search?

Based on our automated security analysis, Google Reverse Image Search presents high risk level. The extension is analyzed for malware patterns, secret exposure, network communications, permissions, and supply chain vulnerabilities.

How is the security score calculated?

Risky Plugins calculates security scores using weighted categories: severity of findings (25 points max), malware detections (35 points), secret exposure (28 points), network communications (10 points), and obfuscation (10 points). Scores range from 0-100, with higher scores indicating greater risk.

What does CRITICAL, HIGH, MEDIUM, LOW, MINIMAL risk mean?

CRITICAL (80-100): Severe security issues like malware. HIGH (60-79): Significant vulnerabilities. MEDIUM (40-59): Moderate security concerns. LOW (20-39): Minor issues. MINIMAL (0-19): Very low risk. Always review findings before installing any extension.

Is "Google Reverse Image Search" on Firefox Add-ons Safe to Install?

Name: Google Reverse Image Search
Availability: InStock
Rating: 3.0732 (41 reviews)
Author: Baris Derin

Baris Derin · firefox · v64.1.1resigned1

Google Reverse Image Search is a simple tool that lets you search the images reversely on Google Images and find the other copies of the very image you are looking for on the web. It comes very handy solution when you are looking for the other sizes of a specific image. Google Reverse Image Search is designed to be very easy to use. It works on any web page image. You need to right click on an image and choose Reverse Search on Google to reversely search your image. A new tab will open automatically and Google Images page related to your search will be available to you. As examples; You can right check below URLs to see the add-on in action: Miranda Kerr Johhny Depp Angelina Jolie Brad Pitt

Risk Assessment

Analyzed

66.83

out of 100

HIGH

135 security findings detected across all analyzers

Firefox extension requesting 12 permissions

Severity Breakdown

Critical

High

121

Medium

Low

Info

Finding Categories

Malware Signatures

Network

117

IoC Indicators

YARA Rules Matched

9 rules(14 hits)

postinstall system command postinstall file download postinstall network communication postinstall file manipulation LocalStorageShouldNotBeUsed postinstall obfuscation SQLInjection NoUseWeakRandom postinstall crypto operations

Requested Permissions

12 permissions

<all_urls>

Access and modify data on every website you visit

Dangerous

http://*/*

Dangerous

https://*/*

Dangerous

Read and modify cookies on all sites

High

webRequest

Intercept, modify, and block all network requests

High

webRequestBlocking

Block network requests before they complete

High

downloads

Manage, modify, and monitor downloads

High

tabs

Medium

contextualIdentities

Low

contextMenus

Low

storage

Low

*://*.barisderin.com/*

Low

About This Extension

Google Reverse Image Search is a simple tool that lets you search the images reversely on Google Images and find the other copies of the very image you are looking for on the web. It comes very handy solution when you are looking for the other sizes of a specific image. Google Reverse Image Search is designed to be very easy to use. It works on any web page image. You need to right click on an image and choose Reverse Search on Google to reversely search your image. A new tab will open automatically and Google Images page related to your search will be available to you. As examples; You can right check below URLs to see the add-on in action: <a rel="nofollow" href="https://prod.outgoing.prod.webservices.mozgcp.net/v1/48687e301a408a775ee1e1537af084c081359e58ff5629872e23822fd2d45f7b/http%3A//www.google.com/search%3Fhl=en&q=miranda%2Bkerr%2Bhair&tbm=isch&tbs=simg%3ACAQSThpMCxCwjKcIGjAKLggBEgiHBYIFhgWDBRog07sYdRiQgybjKgpiaeeKdqV1Wvgm0sqPnwYrjXdYVvYMCxCOrv4IGgoKCAgBEgQarPF2DA&biw=994&bih=594">Miranda Kerr</a> <a rel="nofollow" href="https://prod.outgoing.prod.webservices.mozgcp.net/v1/f91e7322ef30aaa68d0d8b489cebba1e5476cbebb293357cbf764b3877ec10d6/http%3A//www.google.com/search%3Fhl=en&q=johnny%2Bdepp&tbm=isch&tbs=simg%3ACAQSVBpSCxCwjKcIGjYKNAgBEg64Ba8F6wWhBacF3AWgBRogg5dXaUqRSAvmRwiGqIdld1ZycZRW9oVsexcMmruDeMsMCxCOrv4IGgoKCAgBEgSXmLCsDA&biw=994&bih=594">Johhny Depp</a> <a rel="nofollow" href="https://prod.outgoing.prod.webservices.mozgcp.net/v1/284abaff6d58b5fa4471f00527baae06fd020ce9ebe0b9aaaa508c8904654943/http%3A//www.google.com/search%3Fhl=en&q=angelina%2Bjolie&tbm=isch&tbs=simg%3ACAQSThpMCxCwjKcIGjAKLggBEgjcBMoEhwWGBRog8do4WQnAambUTwtVqJSoqGiHvNgo0FzuzTd_1nKiId8UMCxCOrv4IGgoKCAgBEgRtpZE7DA&biw=994&bih=594">Angelina Jolie</a> <a rel="nofollow" href="https://prod.outgoing.prod.webservices.mozgcp.net/v1/68923f96cce9f8c018eeaa4c3c9686a722dd7a766f9ff8cf405b7ce7705fe4cc/http%3A//www.google.com/search%3Fhl=en&q=brad%2Bpitt&tbm=isch&tbs=simg%3ACAQSShpICxCwjKcIGiwKKggBEgTaBNkEGiDQqT1IN4NKNuRJB4ebtGlkpnVn1VnzitmvCzrrqZhU5wwLEI6u_1ggaCgoICAESBLaNBcgM&biw=994&bih=594">Brad Pitt</a>

Detailed Findings

18 total

YARA Rule Matches

9 rules

Indicators of Compromise

Network indicators, suspicious strings, and potential IoCs extracted during analysis

URLs

IP Addresses

Domains

101

Strings

117

All Indicators · 117

Domain

detected Domain: l.setup.call

XIOC detected Domain: l.setup.call

extracted_from_files

detected IP: ::

XIOC detected IP: ::

extracted_from_files

URL

detected URL: http://barisderin.com/?p=2596

XIOC detected URL: http://barisderin.com/?p=2596

extracted_from_files

URL

detected URL: http://barisderin.com/?p=2598

XIOC detected URL: http://barisderin.com/?p=2598

extracted_from_files

URL

detected URL: http://barisderin.com

XIOC detected URL: http://barisderin.com

extracted_from_files

URL

detected URL: http://www.pinterest.com/pin/create/bookmarklet/?media=

XIOC detected URL: http://www.pinterest.com/pin/create/bookmarklet/?media=

extracted_from_files

Domain

detected Domain: h.tc

XIOC detected Domain: h.tc

extracted_from_files

Domain

detected Domain: 4.gg

XIOC detected Domain: 4.gg

extracted_from_files

Domain

detected Domain: www.apache.org

XIOC detected Domain: www.apache.org

extracted_from_files

URL

detected URL: http://addons.mozilla.org/ca/crl.pem0N

XIOC detected URL: http://addons.mozilla.org/ca/crl.pem0N

extracted_from_files

URL

detected URL: https://www.pinterest.com/pin/create/bookmarklet/?media=

XIOC detected URL: https://www.pinterest.com/pin/create/bookmarklet/?media=

extracted_from_files

URL

detected URL: http://www.google.com/searchbyimage?image_url=

XIOC detected URL: http://www.google.com/searchbyimage?image_url=

extracted_from_files

URL

detected URL: https://www.google.com/searchbyimage/upload

XIOC detected URL: https://www.google.com/searchbyimage/upload

extracted_from_files

Domain

detected Domain: h.open

XIOC detected Domain: h.open

extracted_from_files

Domain

detected Domain: d.top

XIOC detected Domain: d.top

extracted_from_files

Domain

detected Domain: m.top

XIOC detected Domain: m.top

extracted_from_files

Domain

detected Domain: b.top-h.top

XIOC detected Domain: b.top-h.top

extracted_from_files

Domain

detected Domain: b.using.call

XIOC detected Domain: b.using.call

extracted_from_files

Domain

detected Domain: mobile.twitter.com

XIOC detected Domain: mobile.twitter.com

extracted_from_files

Domain

detected Domain: qln1.gp

XIOC detected Domain: qln1.gp

extracted_from_files

Domain

detected Domain: lb.host

XIOC detected Domain: lb.host

extracted_from_files

Domain

detected Domain: j.host

XIOC detected Domain: j.host

extracted_from_files

Domain

detected Domain: o.data

XIOC detected Domain: o.data

extracted_from_files

Domain

detected Domain: o.global

XIOC detected Domain: o.global

extracted_from_files

Domain

detected Domain: o.beforesend.call

XIOC detected Domain: o.beforesend.call

extracted_from_files

Domain

detected Domain: y.fail

XIOC detected Domain: y.fail

extracted_from_files

Domain

detected Domain: v.data

XIOC detected Domain: v.data

extracted_from_files

Domain

detected Domain: j.opts.fail

XIOC detected Domain: j.opts.fail

extracted_from_files

Domain

detected Domain: r.fx.off

XIOC detected Domain: r.fx.off

extracted_from_files

Domain

detected Domain: d.old.call

XIOC detected Domain: d.old.call

extracted_from_files

Domain

detected Domain: j.id

XIOC detected Domain: j.id

extracted_from_files

Domain

detected Domain: finish.call

XIOC detected Domain: finish.call

extracted_from_files

Domain

detected Domain: b.target

XIOC detected Domain: b.target

extracted_from_files

Domain

detected Domain: this.name

XIOC detected Domain: this.name

extracted_from_files

Domain

detected Domain: i.style

XIOC detected Domain: i.style

extracted_from_files

Domain

detected Domain: this.now

XIOC detected Domain: this.now

extracted_from_files

Domain

detected Domain: this.options.step.call

XIOC detected Domain: this.options.step.call

extracted_from_files

Domain

detected Domain: a.elem.style

XIOC detected Domain: a.elem.style

extracted_from_files

Domain

detected Domain: a.now

XIOC detected Domain: a.now

extracted_from_files

Domain

detected Domain: g.empty.fire

XIOC detected Domain: g.empty.fire

extracted_from_files

Domain

detected Domain: j.opts.start.call

XIOC detected Domain: j.opts.start.call

extracted_from_files

Domain

detected Domain: this.off

XIOC detected Domain: this.off

extracted_from_files

Domain

detected Domain: f.events

XIOC detected Domain: f.events

extracted_from_files

Domain

detected Domain: g.events

XIOC detected Domain: g.events

extracted_from_files

Domain

detected Domain: q.call

XIOC detected Domain: q.call

extracted_from_files

Domain

detected Domain: b.events

XIOC detected Domain: b.events

extracted_from_files

Domain

detected Domain: this.map

XIOC detected Domain: this.map

extracted_from_files

Domain

detected Domain: b.top

XIOC detected Domain: b.top

extracted_from_files

Domain

detected Domain: b.data

XIOC detected Domain: b.data

extracted_from_files

Domain

detected Domain: g.data

XIOC detected Domain: g.data

extracted_from_files

Domain

detected Domain: k.postdispatch.call

XIOC detected Domain: k.postdispatch.call

extracted_from_files

Domain

detected Domain: a.target

XIOC detected Domain: a.target

extracted_from_files

Domain

detected Domain: this.click

XIOC detected Domain: this.click

extracted_from_files

Domain

detected Domain: this.target

XIOC detected Domain: this.target

extracted_from_files

Domain

detected Domain: r.now

XIOC detected Domain: r.now

extracted_from_files

URL

detected URL: https://google.com

XIOC detected URL: https://google.com

extracted_from_files

Domain

detected Domain: l.add.call

XIOC detected Domain: l.add.call

extracted_from_files

Domain

detected Domain: r.event.global

XIOC detected Domain: r.event.global

extracted_from_files

Domain

detected Domain: l.remove.call

XIOC detected Domain: l.remove.call

extracted_from_files

Domain

detected Domain: l.teardown.call

XIOC detected Domain: l.teardown.call

extracted_from_files

Domain

detected Domain: k.predispatch.call

XIOC detected Domain: k.predispatch.call

extracted_from_files

Domain

detected Domain: r.event.handlers.call

XIOC detected Domain: r.event.handlers.call

extracted_from_files

Domain

detected Domain: a.style

XIOC detected Domain: a.style

extracted_from_files

Domain

detected Domain: r.style

XIOC detected Domain: r.style

extracted_from_files

Domain

detected Domain: d.style

XIOC detected Domain: d.style

extracted_from_files

Domain

detected Domain: this.show

XIOC detected Domain: this.show

extracted_from_files

Domain

detected Domain: ma.th

XIOC detected Domain: ma.th

extracted_from_files

Domain

detected Domain: ma.td

XIOC detected Domain: ma.td

extracted_from_files

Domain

detected Domain: q.events

XIOC detected Domain: q.events

extracted_from_files

Domain

detected Domain: e.call

XIOC detected Domain: e.call

extracted_from_files

Domain

detected Domain: ga.select

XIOC detected Domain: ga.select

extracted_from_files

Domain

detected Domain: j.call

XIOC detected Domain: j.call

extracted_from_files

Domain

detected Domain: b.name

XIOC detected Domain: b.name

extracted_from_files

Domain

detected Domain: d.call

XIOC detected Domain: d.call

extracted_from_files

Domain

detected Domain: b.map

XIOC detected Domain: b.map

extracted_from_files

Domain

detected Domain: f.empty.fire

XIOC detected Domain: f.empty.fire

extracted_from_files

Domain

detected Domain: e.top

XIOC detected Domain: e.top

extracted_from_files

Domain

detected Domain: d.filter.id

XIOC detected Domain: d.filter.id

extracted_from_files

Domain

detected Domain: d.find.id

XIOC detected Domain: d.find.id

extracted_from_files

Domain

detected Domain: s.call

XIOC detected Domain: s.call

extracted_from_files

Domain

detected Domain: c.call

XIOC detected Domain: c.call

extracted_from_files

Domain

detected Domain: b.id

XIOC detected Domain: b.id

extracted_from_files

Domain

detected Domain: b.next

XIOC detected Domain: b.next

extracted_from_files

Domain

detected Domain: l.call

XIOC detected Domain: l.call

extracted_from_files

Domain

detected Domain: b.call

XIOC detected Domain: b.call

extracted_from_files

Domain

detected Domain: h.call

XIOC detected Domain: h.call

extracted_from_files

Domain

detected Domain: i.call

XIOC detected Domain: i.call

extracted_from_files

Domain

detected Domain: date.now

XIOC detected Domain: date.now

extracted_from_files

Domain

detected Domain: e.stop.call

XIOC detected Domain: e.stop.call

extracted_from_files

Domain

detected Domain: ga.support

XIOC detected Domain: ga.support

extracted_from_files

Domain

detected Domain: event.target

XIOC detected Domain: event.target

extracted_from_files

Domain

detected Domain: jquery.org

XIOC detected Domain: jquery.org

extracted_from_files

Domain

detected Domain: m.call

XIOC detected Domain: m.call

extracted_from_files

Domain

detected Domain: f.call

XIOC detected Domain: f.call

extracted_from_files

Domain

detected Domain: r.map

XIOC detected Domain: r.map

extracted_from_files

Domain

detected Domain: a.call

XIOC detected Domain: a.call

extracted_from_files

Domain

detected Domain: k.call

XIOC detected Domain: k.call

extracted_from_files

Domain

detected Domain: images.google.com

XIOC detected Domain: images.google.com

extracted_from_files

Domain

detected Domain: barisderin.com

XIOC detected Domain: barisderin.com

extracted_from_files

Domain

detected Domain: window.open

XIOC detected Domain: window.open

extracted_from_files

Domain

detected Domain: mozilla.org

XIOC detected Domain: mozilla.org

extracted_from_files

Domain

detected Domain: google.com

XIOC detected Domain: google.com

extracted_from_files

Domain

detected Domain: httprequest.channel.name

XIOC detected Domain: httprequest.channel.name

extracted_from_files

Domain

detected Domain: httprequest.open

XIOC detected Domain: httprequest.open

extracted_from_files

Domain

detected Domain: signingca1.addons.mozilla.org

XIOC detected Domain: signingca1.addons.mozilla.org

extracted_from_files

Domain

detected Domain: mozilla.com

XIOC detected Domain: mozilla.com

extracted_from_files

Domain

detected Domain: addons.mozilla.org

XIOC detected Domain: addons.mozilla.org

extracted_from_files

Domain

detected Domain: content-signature.mozilla.org

XIOC detected Domain: content-signature.mozilla.org

extracted_from_files

Domain

detected Domain: t13520c8672f7fc31c7a9601a17077846.0f3218c7bf867194ef7df8227a478ca1.addons.mozilla.org

XIOC detected Domain: t13520c8672f7fc31c7a9601a17077846.0f3218c7bf867194ef7df8227a478ca1.addons.mozilla.org

extracted_from_files

Domain

detected Domain: www.pinterest.com

XIOC detected Domain: www.pinterest.com

extracted_from_files

Domain

detected Domain: www.google.com

XIOC detected Domain: www.google.com

extracted_from_files

URL

detected URL: https://images.google.com/searchbyimage?image_url=

XIOC detected URL: https://images.google.com/searchbyimage?image_url=

extracted_from_files

Hash

detected MD5 Hash: 0f3218c7bf867194ef7df8227a478ca1

XIOC detected MD5 Hash: 0f3218c7bf867194ef7df8227a478ca1

extracted_from_files

URL

detected URL: http://www.apache.org/licenses/LICENSE-2.0

XIOC detected URL: http://www.apache.org/licenses/LICENSE-2.0

extracted_from_files

URL

detected URL: http://www.apache.org/licenses/

XIOC detected URL: http://www.apache.org/licenses/

extracted_from_files

URL

detected URL: https://mobile.twitter.com/

XIOC detected URL: https://mobile.twitter.com/

extracted_from_files

URL

detected URL: http://barisderin.com/?p=1052

XIOC detected URL: http://barisderin.com/?p=1052

extracted_from_files

Security Analysis Summary

Security Analysis Overview

Google Reverse Image Search is a Firefox Add-ons extension published by Baris Derin. Version 64.1.1resigned1 has been analyzed by the Risky Plugins security platform, receiving a risk score of 66.83/100 (HIGH risk) based on 135 security findings.

Risk Assessment

This extension presents high security risk. Significant concerns were identified during analysis. It is not recommended for use in sensitive or production environments without thorough review.

Findings Breakdown

High: 14 finding(s)
Medium: 121 finding(s)

What Was Analyzed

The security assessment covers multiple analysis categories:

Malware Detection: YARA rule matching against 2,400+ malware signatures
Secret Detection: Scanning for exposed API keys, tokens, and credentials
Static Analysis: Code-level security analysis for common vulnerability patterns
Network Analysis: Detection of suspicious network communications and endpoints
Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

Google Reverse Image Search is published by Baris Derin on the Firefox Add-ons marketplace. The extension has approximately 3K users.

Recommendation

This extension is not recommended for installation without thorough manual review. Consider alternatives with lower risk scores, or contact the developer to address the identified security concerns.

Source Code Viewer

Source Code Not Available

Source code is not available for this version of the extension.

Frequently Asked Questions

Similar Extensions

Related extensions from the same publisher or marketplace

Google Reverse Image Search

Baris Derin

CRITICAL 3K users

Open With for Internet Explorer

Baris Derin

CRITICAL 2K users

Open With for Internet Explorer

Baris Derin

CRITICAL 2K users

CloudBleed

Baris Derin

CRITICAL 51 users

CloudBleed

Baris Derin

CRITICAL 45 users

Open With Adobe Illustrator

Baris Derin

CRITICAL 346 users

Is "Google Reverse Image Search" on Firefox Add-ons Safe to Install?

Risk Assessment

Severity Breakdown

Finding Categories

YARA Rules Matched

Requested Permissions

About This Extension

Detailed Findings

MANIFEST-SENSITIVE-PERM-TABS

MANIFEST-SENSITIVE-PERM-<ALL_URLS>

NET-XMLHTTPREQUEST-scripts/content_script.js-70

NET-XMLHTTPREQUEST-background.js-86

YARA Rule Matches

postinstall system command

postinstall file download

postinstall network communication

postinstall file manipulation

LocalStorageShouldNotBeUsed

postinstall obfuscation

SQLInjection

NoUseWeakRandom

postinstall crypto operations

Indicators of Compromise

All Indicators · 117

Security Analysis Summary

Security Analysis Overview

Risk Assessment

Findings Breakdown

What Was Analyzed

Developer Information

Recommendation

Frequently Asked Questions

Similar Extensions

Google Reverse Image Search

Open With for Internet Explorer

Open With for Internet Explorer

CloudBleed

CloudBleed

Open With Adobe Illustrator