Is Calculator Extension safe?

Medium risk

Calculator Extension sends searches typed on its new-tab page to brownmile.com.

Calculator Extension replaces the Chrome new-tab page with its own search box. When a user submits a search in that page, the extension redirects the browser to brownmile.com with the typed query in the URL.

Ninayav0.0.3Chrome Web Store
45Risk
Who publishes it

Ninaya Ltd - no other listings under this identity

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
Ninaya
Declared legal entity
Ninaya Ltd
Registered address
Ha-Tsmikha St 1, Yokne'am Illit 2066733, IL
Registered contact
App Developer

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Findings

New-tab searches are sent to brownmile.com instead of Bing

Typing a search into Calculator Extension's new-tab box redirects it to brownmile.com instead of Bing.

The request includes the search text plus publisher and channel parameters tied to the redirect URL.

Severity
Medium unwanted
Type
Unexpected
CWE
CWE-359
Source
Dynamic sandbox
What actually happens
You did this

The user submits a search from the extension's new-tab page.

The extension did this

The extension redirects the browser to brownmile.com with the search text in the query string.

Captured request
GETbrownmile.com/?pub=103&ch=1636&query=
Fields in the request
  • Your search text
    calculator history (illustrative)

    The words typed into the new-tab search box are added to the query parameter and sent to the remote host.

  • Redirect URL
    https://brownmile.com/?pub=103&ch=1636&query=calculator%20history (illustrative)

    The destination URL contains publisher and channel parameters plus the search query, linking the search to this redirect flow.

Where it sends data

Destinations our analysis observed Calculator Extension contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • brownmile.com

    Calculator Extension sends data to brownmile.com. No other extension we have analysed sends data here.

Updated 30 September 2026bfnolignfekjbegbaobenmkhhkjifbcn