Is 1ClickFav safe?
1ClickFav sends new-tab search queries to click.1clickfav.com with a fixed tracking ID.
1ClickFav replaces the browser new tab page and redirects searches entered there to click.1clickfav.com with the typed query and a fixed tracking ID. When users add favorite tiles, the new tab page also loads favicons from Google with each saved favorite URL embedded in the request.
Who publishes itoffice@searchologic.com - 2 other listings from the same operator, 2 of them carrying a finding
office@searchologic.com - 2 other listings from the same operator, 2 of them carrying a finding
What this publisher told the store about itself, and the other listings that told it the same thing.
Same store account
2 other listings published from this account, 30k+ users between them. 2 of them carry a finding.
Shared hosts - 1 hostname
Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Findings
New-tab searches send the query to 1ClickFav tracking endpoint
When you submit a search from 1ClickFav's new-tab page, the extension redirects it to click.1clickfav.com.
The request carries the text you typed plus a fixed tracking ID.
- Severity
- Medium unwanted
- Type
- Unexpected
- CWE
- CWE-359
- Source
- Dynamic sandbox
User submits a search from the extension's new-tab page.
The extension redirects the query to click.1clickfav.com with a fixed tracking ID.
- Search queryweather this weekend (illustrative)
The text entered into the new-tab search form is sent as the q parameter.
Where it sends data
Destinations our analysis observed 1ClickFav contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- t3.gstatic.com
1ClickFav sends data to t3.gstatic.com. One other extension we have analysed sends data here.
- click.1clickfav.com
1ClickFav sends data to click.1clickfav.com. No other extension we have analysed sends data here.