Is CR7 Wallpaper HD HomePage safe?

Medium risk

CR7 Wallpaper HD HomePage sends new-tab search text to Google Analytics as user-search telemetry.

When you type in the extension's new-tab search box, it sends a user-search event containing the search text to Google Analytics. The same telemetry also includes the extension ID, selected search engine, browser language, page URL, page title, screen resolution, and a persistent Google Analytics client ID stored in localStorage.

magicsono33v1.0.0Chrome Web Store
45Risk
Who publishes it

magicsono33 - 1 other listing from the same operator, none carrying a finding

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
magicsono33

Same store account

1 other listing published from this account, 2k+ users between them, none of them carrying a finding.

Your Name Wallpaper HD HomePage2k+Clean

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Findings

New-tab searches are sent to Google Analytics telemetry

Typing in the extension's new-tab search box sends the search text to Google Analytics as a user-search event, including the typed input plus page context like the current URL and title.

Severity
Medium unwanted
Type
Unexpected
CWE
CWE-359
Source
Dynamic sandbox
What actually happens
You did this

The user types into the extension's new-tab search field.

The extension did this

The extension records the typed value as a user-search event and sends it to Google Analytics.

Captured request
POSThttps://www.google-analytics.com/g/collect
Fields in the request
  • Your search text
    Cristiano Ronaldo wallpaper (illustrative)

    The words typed into the new-tab search box can reveal what you are looking for.

  • Current page URL
    chrome-extension://extension-id/newtab.html (illustrative)

    The page address provides context for where the search event occurred.

  • Page title
    CR7 Wallpaper HD HomePage

    The page title adds readable context for the new-tab page tied to the event.

Where it sends data

Destinations our analysis observed CR7 Wallpaper HD HomePage contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • www.google-analytics.comwidely used

    CR7 Wallpaper HD HomePage sends data to www.google-analytics.com. A widely used service: 346 other extensions we have analysed send data here.

Updated 30 September 2026fnhcbclnkoilgedhalmijgpfdhihljeb