Is Cats Fan safe?

Medium risk

Cats Fan sends new-tab search queries to cats.catsfanext.com with an affiliate tracking ID.

Cats Fan replaces the browser new tab with its own search page. When a user submits a search there, the extension redirects the tab to cats.catsfanext.com with the typed query and affiliate tracking ID 960490 in the URL.

contact@softzpub.com v1.2.3Chrome Web Store
45Risk
Who publishes it

contact@softzpub.com - no other listings under this identity

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
contact@softzpub.com
Website
cats-fan.com/pages/contact.html

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Findings

New-tab searches are sent to Cats Fan affiliate search endpoint.

Submitting a search from the Cats Fan new-tab page redirects to cats.catsfanext.com with your typed query in the URL, plus affiliate tracking ID 960490, so search terms leave the page alongside that tracking parameter.

Severity
Medium unwanted
Type
Unexpected
CWE
CWE-359
Source
Dynamic sandbox
What actually happens
You did this

The user submits a search from the extension's new-tab page.

The extension did this

The extension redirects the tab to cats.catsfanext.com with the typed query and affiliate tracking ID 960490 in the URL.

Captured request
GEThttps://cats.catsfanext.com/?tid=960490&q=...
Fields in the request
  • Your search query
    cat videos (illustrative)

    The terms typed into the new-tab search box are included in the outgoing URL.

  • Destination URL context
    https://cats.catsfanext.com/?tid=960490&q=cat%20videos (illustrative)

    The request URL includes the affiliate tracking ID and query parameter used for the search redirect.

Observation

Dynamic analysis confirmed the new-tab search flow and the redirect destination described in the claim evidence.

What it can do

Permissions this extension asks for, as declared in version 1.2.3. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on catsfanext.com

    *://*.catsfanext.com/*

Where it sends data

Destinations our analysis observed Cats Fan contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • cats.catsfanext.com

    Cats Fan sends data to cats.catsfanext.com. No other extension we have analysed sends data here.

Updated 30 September 2026nkhleengjihjncmbkldpfmoankdkhahg