Is Get Weather Today safe?
Get Weather Today is medium risk. Get Weather Today overrides your default search engine with a proxy at searchsafelypro.net. Every query, and each keystroke you type, is sent there with a static partner code (s=c9pr). The listing claims results are 'powered by Yahoo'.
Who publishes itGet Weather Today - no other listings under this identity
Get Weather Today - no other listings under this identity
What this publisher told the store about itself, and the other listings that told it the same thing.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Findings
Weather Extension Overrides Default Search Engine
Get Weather Today overrides your default search engine with a proxy at searchsafelypro.net.
Every query, and each keystroke you type, is sent there with a static partner code (s=c9pr).
The listing claims results are 'powered by Yahoo'.
What actually happens
You install the extension and type a search query into the browser address bar.
No additional consent is requested; the search override is active as soon as the extension loads.
Your query, and every keystroke as you type it, is routed to searchsafelypro.net with the static tracking code s=c9pr.
Chrome substitutes the partial input into suggest_url for live suggestions and the full term into search_url on submission.
Data sent on every search and suggestion request
- Search queryweather in london tomorrow
The complete text of what you searched for, or the partial text you are still typing.
- Partner tracking codes=c9pr
A static code (s=c9pr) that identifies all traffic as originating from this extension's distribution campaign.
- Search categorycategory=web
The type of search (web or images), sent on every request.
- Vertical identifiervert=private
A secondary campaign segment (vert=private or vert=weather) sent alongside every query.
The code that does this
Manifest search provider declaration
config.js — derives all URLs from the manifest at runtime
config.jslet url = getLocation(chrome.runtime.getManifest().chrome_settings_overrides.search_provider.search_url);const hostName = `${url.hostname.split('.')[1]}.${url.hostname.split('.')[2]}`;const params = getParams(url.search);export const config = { domain: url.origin, // https://www.searchsafelypro.net yid: params['s'], // 'c9pr' vert: params['vert'], // 'private' search: `${url.origin}${url.pathname}?category=web&s=${params['s']}&vert=${params['vert']}`, uninstall: `${url.origin}/wim/uninstall?s=${params['s']}&vert=${params['vert']}`, extId: chrome.runtime.id,};Domains receiving omnibox traffic
- www.searchsafelypro.net
Receives completed search queries via the overridden search_url. Parent company and ownership of searchsafelypro.net are not publicly disclosed in the extension or store listing.
- sug.searchsafelypro.net
Receives partial keystrokes in real time via the suggest_url for autocomplete suggestions as the user types.
Store listing mismatch
The Chrome Web Store description states results are 'powered by Yahoo'. The manifest routes all queries to searchsafelypro.net. No Yahoo domain appears in any manifest URL, background script, or config entry.