Is BudgetBuddy safe?

Medium risk

BudgetBuddy sends new-tab search terms to suggestion and search redirect domains.

BudgetBuddy replaces the browser's new-tab page with its budget interface and a search box. As you type in that search box, each non-empty query is sent to suggest.findit-all.com for suggestions, and submitted searches redirect to uhereugo.com with the encoded query in the URL.

RedTLVv1.4Chrome Web Store
45Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Findings

New-tab searches are sent to suggestion and redirect domains

When you type in BudgetBuddy's new-tab search box, the extension sends your search terms to a suggestion service at suggest.findit-all.com.

Submitting the search redirects the browser to uhereugo.com with the query in the URL.

Severity
Medium unwanted
Type
Unexpected
CWE
CWE-359
Source
Dynamic sandbox
What actually happens
You did this

The user types in or submits the new-tab search box.

The extension did this

The extension sends typed search terms to a suggestion domain and redirects submitted searches to another domain.

Captured request
GETsuggest.findit-all.com/suggestionFeed/suggestion; uhereugo.com/results.aspx
Fields in the request
  • Your search terms
    weekly grocery deals (illustrative)

    The text typed into the new-tab search box is included in suggestion and search-result requests.

  • Search request URL
    https://uhereugo.com/results.aspx?gd=RD1003893&searchsource=69&q=weekly%20grocery%20deals&n=1003 (illustrative)

    The submitted search is placed in a URL sent to the redirect domain, linking the query to that request.

What it can do

Permissions this extension asks for, as declared in version 1.4. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Store data in your browser

    storage

Where it sends data

Destinations our analysis observed BudgetBuddy contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • suggest.findit-all.com

    BudgetBuddy sends data to suggest.findit-all.com. One other extension we have analysed sends data here.

  • uhereugo.com

    BudgetBuddy sends data to uhereugo.com. No other extension we have analysed sends data here.

Updated 30 September 2026ampdcpljfimadppoegganahbpkjoekkb