Is Magic list safe?

Medium risk

Magic list replaces your new-tab page and sends every search you type to rsrc-withus.com with fixed affiliate tags.

The extension overrides Chrome's new-tab page with its own page that includes a search box. When you submit a query, it redirects you to rsrc-withus.com/results.aspx, appending your search term along with hardcoded partner/affiliate parameters (gd=RD1003639, searchsource=69). The search destination is not configurable and the new-tab page does not disclose that searches are routed through this third-party monetization domain.

ARGON INFORMATION TECHNOLOGY CO LLCv1.0.6Chrome Web Store
45Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Findings

New-tab searches go to rsrc-withus.com with partner IDs

MediumunwantedCWE-359Dynamic sandbox

Source code shows Magic list replaces the browser new-tab page.

What actually happens

You did this

You submit a search from the Magic list new-tab page.

The reviewed page contains one visible search box for this action.

The extension did this

The extension sends the browser to rsrc-withus.com with your search term in the URL.

The generated URL also includes gd=RD1003639, searchsource=69, and n=1000.

Fields placed into the search redirect URL

  • Search box text
    weather tomorrow (illustrative)

    This is what you typed into the new-tab search form.

  • Results destination
    rsrc-withus.com/results.aspx

    This determines which outside site receives the search request.

  • Partner identifier
    gd=RD1003639

    This marks the request with a fixed partner code rather than a search provider you chose in the page.

  • Search source code
    searchsource=69

    This adds another fixed routing value to the same search request.

  • Completed URL
    https://rsrc-withus.com/results.aspx?gd=RD1003639&searchsource=69&n=1000&q=weather%20tomorrow (illustrative query)

    This combines your search term with the destination and fixed routing values in one browser navigation.

Captured request

GEThttps://rsrc-withus.com/results.aspx?gd=RD1003639&searchsource=69&n=1000&q=weather%20tomorrow

Illustrative GET URL generated by the form handler; no request body is used for this browser navigation.

The code that does this

Source path from new-tab replacement to search redirect

Readable version

The extension replaces the browser new-tab page

manifest.json
{"update_url": "https://clients2.google.com/service/update2/crx",  "manifest_version": 3,  "version": "1.0.6",  "name": "Magic list",  "description": "Magic list",  "chrome_url_overrides": {      "newtab": "index.html"  },  "icons": {      "128": "icon.png"  },  "action": {      "default_icon": "icon.png"  },  "permissions": [    "unlimitedStorage"  ]}

The new-tab page loads the search form and form handler

index.html
<!DOCTYPE html><html><head>	<meta charset="utf-8">	<title>Magic list</title>	<link rel="stylesheet" href="style.css" />    <link href="https://fonts.googleapis.com/css2?family=Poppins:wght@400;500&display=swap" rel="stylesheet">    <!--Font Awesome CDN-->    <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.2/css/all.min.css"></head>    <body>        <div style="display: flex; flex-direction: column">            <div id="greeting">            </div>            <div class="main-box">                <form method="GET" class="search-bar light js-form" autocomplete="off">                    <button type="submit" class="icon icon-search"></button>                    <input class="search-request-input" type="hidden" name="s" value="bing2">                    <input class="inputValue" type="text" name="q" placeholder="Please enter a request">                </form>            </div>			<div class="logo"></div>            <div class="container">				<div id="newtask">                    <input type="text" placeholder="Task to be done..">                    <button id="push">Add</button>                </div>                        <div id="tasks"></div>            </div>        <div id="bottom-links">            <div class="bottom-links_container">                 <a href="https://extargonit.com/pages/about.html" title="About Us" target="_blank">About Us</a>                <a href="https://extargonit.com/pages/terms.html" title="Terms of Service" target="_blank">Terms of Service</a>                 <a href="https://extargonit.com/pages/privacy.html" title="Privacy Policy" target="_blank">Privacy Policy</a>                 <a href="https://extargonit.com/pages/contact.html" title="Contact Us" target="_blank">Contact Us</a>            </div>        </div>        <script src="./js/index.js"></script>        <script src="./js/form.js"></script>        <script src="./js/time.js"></script>    </body></html>

The submit handler builds the rsrc-withus.com redirect

js/form.js
const search = document.querySelector('.js-form');search.addEventListener('submit', (event) => {  event.preventDefault();  const value = document.querySelector('.inputValue').value;  if (encodeURIComponent(value) != '') {    window.location.href = `https://rsrc-withus.com/results.aspx?gd=RD1003639&searchsource=69&n=1000&q=${encodeURIComponent(value)}`;  } else return false;});

Destination reached by the search form

    • rsrc-withus.com

    Receives the new-tab search redirect with q, gd, searchsource, and n query parameters.

    • extargonit.com

    Linked from the new-tab page footer for About, Terms of Service, Privacy Policy, and Contact pages.

What it can do

Permissions this extension asks for, as declared in version 1.0.6. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Store an unlimited amount of data in your browser

    unlimitedStorage

Where it sends data

Destinations our analysis observed Magic list contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • rsrc-withus.com

    Magic list sends data to rsrc-withus.com. No other extension we have analyzed sends data here.

Updated 30 September 2026hefeclmbnbfidedflacnalnhdobkllfi