Is Galaxy Creatures safe?
Galaxy Creatures sends new-tab searches with persistent extension identifiers to search.galaxycreature.net.
When you use the new-tab search box, the form submits the search query to search.galaxycreature.net. It also includes stored identifiers such as the extension user ID, channel secret, click ID, and installation week/year that were created or received at install time.
Who publishes itgalaxycreature.net - no other listings under this identity
galaxycreature.net - no other listings under this identity
What this publisher told the store about itself, and the other listings that told it the same thing.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Findings
New-tab searches send queries with extension identifiers.
When you search from Galaxy Creatures' new-tab page, the extension sends the search term to search.galaxycreature.net along with stored extension identifiers and install-timing fields, tying the search to persistent extension-side values.
- Severity
- Medium unwanted
- Type
- Unexpected
- CWE
- CWE-359
- Source
- Dynamic sandbox
The user submits a search from the extension's new-tab page.
The extension sends the query with form metadata fields containing persistent extension identifiers and install timing values.
- Your search queryweather today (illustrative)
The words entered into the new-tab search form are sent to the remote search endpoint.
- Stored extension identifiersd84b646b-adf5-4462-bbd6-8d0a3905185b (illustrative)
Values from extension storage, including user and campaign identifiers, can link separate searches to the same extension installation.
What it can do
Permissions this extension asks for, as declared in version 1.1.2. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Read and change your data on galaxycreature.net
*://galaxycreature.net/*
Store data in your browser
storage
Read and change your bookmarks
bookmarks
Where it sends data
Destinations our analysis observed Galaxy Creatures contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- galaxycreature.net
Galaxy Creatures sends data to galaxycreature.net. No other extension we have analysed sends data here.
- search.galaxycreature.net
Galaxy Creatures sends data to search.galaxycreature.net. No other extension we have analysed sends data here.