Is Great Start - Homepage safe?

Medium risk

Great Start is medium risk. Every new tab search redirects to greatstartapp.com/serp.php before reaching the chosen engine. Requests carry the query, a persistent install ID (chrome.runtime.id), version, and provider, enabling tracking, undisclosed in the listing.

greatstartlabv1.0.1Chrome Web Store
45Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Findings

SeverityMEDIUM
ClassUNWANTED
TypeUnexpected
CWECWE-359
SourceAI SANDBOX

Search queries routed through greatstartapp.com with persistent install ID

Every new tab search redirects to greatstartapp.com/serp.php before reaching the chosen engine.

Requests carry the query, a persistent install ID (chrome.runtime.id), version, and provider, enabling tracking, undisclosed in the listing.

01EvidenceCAUSE EFFECT
What actually happens
You did this

You type a search and press Enter on the new tab page.

The new tab page replaces the browser default and provides a search bar.

The extension did this

The extension intercepts the submission and redirects your browser to greatstartapp.com, sending your search query along with a persistent identifier unique to your installation.

No consent prompt is shown. The redirect fires unconditionally on every search.

02EvidenceNETWORK CAPTURE
Captured request
GEThttps://greatstartapp.com/serp.php?v=1.0.1&id=goabeeekdabpokgoieonknlecpaoejon&q=<planted-marker>&provider=yahoo
Captured in dynamic analysis (dynamic analysis), source=page. A planted marker value was confirmed present in the URL, confirming the query leaves the device. No request body, all parameters are in the query string.
03EvidenceFIELD TABLE
Parameters sent to greatstartapp.com on every search:
FieldValueWhy it matters
Your search query
symptoms of flu vs covidThe exact text you typed into the search bar.
Your installation ID
goabeeekdabpokgoieonknlecpaoejonA permanent identifier unique to your install. Unchanged between sessions, so it links all your searches together over time.
Extension version
1.0.1Which version of the extension you have installed.
Selected search provider
yahooWhich search engine you have chosen (e.g. Yahoo, Bing).
04EvidenceCODE COMPARE
The code that does this

The submit handler in bookmarks.js that builds and fires the redirect:

What it actually does
Annotated version showing data flow
// Fires on every search form submission from the new tab page.
// el.preventDefault() stops any direct navigation; the extension
// takes full control and redirects through greatstartapp.com.
document.querySelector('form.search').addEventListener('submit', function (el) {
  const form = new FormData(el.target);
  const provider = form.get('provider');       // e.g. 'yahoo'
  const searchterm = form.get('searchterm');   // the user's query
  el.preventDefault();                         // intercept before any navigation

  let manifestData = chrome.runtime.getManifest();

  // Redirect to greatstartapp.com with all parameters.
  // chrome.runtime.id is persistent for the lifetime of the installation.
  window.location.href =
    'https://greatstartapp.com' +
    '/serp.php?v=' + encodeURIComponent(manifestData.version) +
    '&id='       + encodeURIComponent(chrome.runtime.id) +
    '&q='        + encodeURIComponent(searchterm) +
    '&provider=' + encodeURIComponent(provider);
});
05EvidenceTHIRD PARTY LIST
Where search queries are transmitted:
  • greatstartapp.com

    Receives every search query, the persistent install ID, extension version, and selected provider. Not referenced in the store listing's disclosures.

Updated 21 September 2026goabeeekdabpokgoieonknlecpaoejon