Is Asia Live Search safe?
Asia Live Search is medium risk. Asia Live Search sends a generated 32-char session ID to asialivewallpaper.com after install, stores it, sets an uninstall URL with it, and adds it to searches through asialivewallpaper.com/search, linking install and search to one session.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Findings
Persistent session ID added to Asia Live Search traffic
Asia Live Search sends a generated 32-char session ID to asialivewallpaper.com after install, stores it, sets an uninstall URL with it, and adds it to searches through asialivewallpaper.com/search, linking install and search to one session.
- Severity
- Medium unwanted
- Type
- Unexpected
- CWE
- CWE-359
- Source
- Dynamic sandbox
You install Asia Live Search or use its default search provider.
The extension sends and reuses a generated session identifier with asialivewallpaper.com requests.
The identifier is sent on installation and added to routed search requests by a browser redirect rule.
200 OK observed during dynamic analysis.
- Session identifiero0nvwg32w5hr3i2umma5ulg4mh11rwa6
Lets requests from the same extension installation be connected over time.
- Install URLhttps://asialivewallpaper.com/start?session=o0nvwg32w5hr3i2umma5ulg4mh11rwa6
Shows that the identifier is sent as soon as the extension registers the installation.
- Search URLhttps://asialivewallpaper.com/search?q=weather&session=o0nvwg32w5hr3i2umma5ulg4mh11rwa6 (illustrative)
Links searches routed through the extension to the same session identifier.
- Uninstall URLhttps://asialivewallpaper.com/uninstall?session=o0nvwg32w5hr3i2umma5ulg4mh11rwa6 (illustrative)
Lets the service associate an uninstall event with the same stored session.
The service worker creates the session and attaches it to requests
Readable service worker from deobfuscated output
background.jschrome.storage.local.get(["session"], settings => { let session; if (settings.session) { session = settings.session; } else { session = [...Array(32)].map(() => (~~(Math.random() * 36)).toString(36)).join(""); chrome.storage.local.set({session: session}, () => { fetch(`https://asialivewallpaper.com/start?session=${session}`, { mode: "no-cors", cache: "no-cache", credentials: "same-origin", redirect: "follow", referrerPolicy: "no-referrer" }).then(); }); } chrome.runtime.setUninstallURL(`https://asialivewallpaper.com/uninstall?session=${session}`); chrome.declarativeNetRequest.getDynamicRules(rules => { chrome.declarativeNetRequest.updateDynamicRules({ removeRuleIds: rules.map(rule => rule.id) }, () => { chrome.declarativeNetRequest.updateDynamicRules({ addRules: [{ id: 10, action: { type: "redirect", redirect: { transform: { queryTransform: { addOrReplaceParams: [{ key: "session", value: session }] } } } }, condition: {urlFilter: "asialivewallpaper.com/search", resourceTypes: ["main_frame"]} }] }).then(); }); });});- asialivewallpaper.com
Receives the install request with the session identifier and handles the extension's configured search and uninstall URLs.
What it can do
Permissions this extension asks for, as declared in version 1.0.2. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Read and change your data on asialivewallpaper.com
*://asialivewallpaper.com/*
Store data in your browser
storage
Block and redirect the requests your browser makes
declarativeNetRequest