Is Get Weather Today safe?

High risk

Get Weather Today is high risk. Get Weather Today overrides your default search engine with a proxy at searchsafelypro.net. Every query, and each keystroke you type, is sent there with a static partner code (s=c9pr). The listing claims results are 'powered by Yahoo'.

Get Weather Todayv3.0.4Chrome Web Store
75Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Findings

SeverityHIGH
ClassUNWANTED
TypeUnexpected
CWECWE-359
SourceAI SANDBOX

Weather Extension Overrides Default Search Engine

Get Weather Today overrides your default search engine with a proxy at searchsafelypro.net.

Every query, and each keystroke you type, is sent there with a static partner code (s=c9pr).

The listing claims results are 'powered by Yahoo'.

01EvidenceCAUSE EFFECT
What actually happens
You did this

You install the extension and type a search query into the browser address bar.

No additional consent is requested; the search override is active as soon as the extension loads.

The extension did this

Your query, and every keystroke as you type it, is routed to searchsafelypro.net with the static tracking code s=c9pr.

Chrome substitutes the partial input into suggest_url for live suggestions and the full term into search_url on submission.

02EvidenceFIELD TABLE
Data sent on every search and suggestion request
FieldValueWhy it matters
Search query
weather in london tomorrowThe complete text of what you searched for, or the partial text you are still typing.
Partner tracking code
s=c9prA static code (s=c9pr) that identifies all traffic as originating from this extension's distribution campaign.
Search category
category=webThe type of search (web or images), sent on every request.
Vertical identifier
vert=privateA secondary campaign segment (vert=private or vert=weather) sent alongside every query.
03EvidenceCODE COMPARE
The code that does this

Manifest search provider declaration

What it actually does
config.js — derives all URLs from the manifest at runtimeconfig.js
let url = getLocation(chrome.runtime.getManifest().chrome_settings_overrides.search_provider.search_url);
const hostName = `${url.hostname.split('.')[1]}.${url.hostname.split('.')[2]}`;
const params = getParams(url.search);

export const config = {
  domain: url.origin,                  // https://www.searchsafelypro.net
  yid: params['s'],                    // 'c9pr'
  vert: params['vert'],                // 'private'
  search: `${url.origin}${url.pathname}?category=web&s=${params['s']}&vert=${params['vert']}`,
  uninstall: `${url.origin}/wim/uninstall?s=${params['s']}&vert=${params['vert']}`,
  extId: chrome.runtime.id,
};
04EvidenceTHIRD PARTY LIST
Domains receiving omnibox traffic
  • www.searchsafelypro.net

    Receives completed search queries via the overridden search_url. Parent company and ownership of searchsafelypro.net are not publicly disclosed in the extension or store listing.

  • sug.searchsafelypro.net

    Receives partial keystrokes in real time via the suggest_url for autocomplete suggestions as the user types.

05EvidencePLAIN NOTE
Store listing mismatch

The Chrome Web Store description states results are 'powered by Yahoo'. The manifest routes all queries to searchsafelypro.net. No Yahoo domain appears in any manifest URL, background script, or config entry.

Updated 17 September 2026depnaiojakmmjcdpccbffphcgjghniol