Is Geometric Structures safe?

Medium risk

Geometric Structures sends new-tab searches with persistent IDs and displayed bookmark URLs to external services.

The new tab page reads browser bookmarks to render shortcut tiles, and each displayed shortcut requests its favicon from Google with the bookmark URL in the request. Its search form submits the user's query to search.geometricstructures.net along with stored extension identifiers, install timing, and a click identifier.

geometricstructures.netv1.0.1Chrome Web Store
45Risk
Who publishes it

geometricstructures.net - no other listings under this identity

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
geometricstructures.net

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Findings

New tab searches send queries with persistent extension identifiers

Searches from the Geometric Structures new-tab form go to search.geometricstructures.net with values from the extension's stored config: the query plus identifiers such as channel, user ID, install timing, and click ID.

Severity
Medium unwanted
Type
Unexpected
CWE
CWE-359
Source
Dynamic sandbox
What actually happens
You did this

A user submits a search from the extension's new tab page.

The extension did this

The extension sends the query together with stored extension identifiers and install timing fields.

Captured request
POSTsearch.geometricstructures.net/ef8f3bd4-ef53-4ac7-9e0a-6bc3d17efaab
Fields in the request
  • Your search query
    weather this weekend (illustrative)

    The text entered into the new tab search form can describe what you are looking for.

  • Stored extension identifiers
    ef8f3bd4-ef53-4ac7-9e0a-6bc3d17efaab (illustrative)

    Stored values such as user ID, channel, click ID, and install timing can link multiple search submissions to the same extension profile.

What it can do

Permissions this extension asks for, as declared in version 1.0.1. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on geometricstructures.net

    *://geometricstructures.net/*

  • Store data in your browser

    storage

  • Read and change your bookmarks

    bookmarks

Where it sends data

Destinations our analysis observed GeometricStructures contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • s2.googleusercontent.com

    GeometricStructures sends data to s2.googleusercontent.com. 12 other extensions we have analysed send data here.

  • search.geometricstructures.net

    GeometricStructures sends data to search.geometricstructures.net. No other extension we have analysed sends data here.

Updated 30 September 2026ajnmmfagmflodlhkcilhlfmncghjiioo