logo

Google's mysterious 'search.app' links leave Android users concerned

ID: 08dff194-5b43-52b5-a281-e42b4098bf22

STIX ID: report--08dff194-5b43-52b5-a281-e42b4098bf22

Feed Name: Bleeping Computer

Date Published: 2024-11-08

Date Updated: 2026-04-20

Author: Ax Sharma

...
...

The report explains that after recent Google app and limited Chrome updates on Android, links shared from the app are being prefixed with the search.app redirector, likely enabling Google analytics, referrer tracking, and potential safety filtering. It associates search.app with Firebase Dynamic Links (despite that service’s deprecation timeline) and flags an atypical TLS certificate whose CN does not match the domain and appears shared across many sites on a Firebase IP, though there is no indication of malicious activity. The lack of public documentation and the certificate oddity are causing user concern, but the behavior appears to be an official Google-operated redirect mechanism.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.