Is Magic list safe?

Medium risk

Magic list replaces your new-tab page and sends every search you type to rsrc-withus.com with fixed affiliate tags.

The extension overrides Chrome's new-tab page with its own page that includes a search box. When you submit a query, it redirects you to rsrc-withus.com/results.aspx, appending your search term along with hardcoded partner/affiliate parameters (gd=RD1003639, searchsource=69). The search destination is not configurable and the new-tab page does not disclose that searches are routed through this third-party monetization domain.

ARGON INFORMATION TECHNOLOGY CO LLCv1.0.6Chrome Web Store
45Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Findings

SeverityMEDIUM
ClassUNWANTED
TypeUnexpected
CWECWE-359
SourceAI SANDBOX

New-tab searches go to rsrc-withus.com with partner IDs

Source code shows Magic list replaces the browser new-tab page.

Submitting a search there redirects to rsrc-withus.com with the typed query in q plus fixed gd/searchsource parameters.

The source offers no configurable search provider.

01EvidenceCAUSE EFFECT
What actually happens
You did this

You submit a search from the Magic list new-tab page.

The reviewed page contains one visible search box for this action.

The extension did this

The extension sends the browser to rsrc-withus.com with your search term in the URL.

The generated URL also includes gd=RD1003639, searchsource=69, and n=1000.

02EvidenceFIELD TABLE
Fields placed into the search redirect URL
FieldValueWhy it matters
Search box text
weather tomorrow (illustrative)This is what you typed into the new-tab search form.
Results destination
rsrc-withus.com/results.aspxThis determines which outside site receives the search request.
Partner identifier
gd=RD1003639This marks the request with a fixed partner code rather than a search provider you chose in the page.
Search source code
searchsource=69This adds another fixed routing value to the same search request.
Completed URL
https://rsrc-withus.com/results.aspx?gd=RD1003639&searchsource=69&n=1000&q=weather%20tomorrow (illustrative query)This combines your search term with the destination and fixed routing values in one browser navigation.
03EvidenceNETWORK CAPTURE
Captured request
GEThttps://rsrc-withus.com/results.aspx?gd=RD1003639&searchsource=69&n=1000&q=weather%20tomorrow
Illustrative GET URL generated by the form handler; no request body is used for this browser navigation.
04EvidenceCODE COMPARE
The code that does this

Source path from new-tab replacement to search redirect

What it actually does
The extension replaces the browser new-tab pagemanifest.json
{
"update_url": "https://clients2.google.com/service/update2/crx",

  "manifest_version": 3,
  "version": "1.0.6",
  "name": "Magic list",
  "description": "Magic list",
  "chrome_url_overrides": {
      "newtab": "index.html"
  },
  "icons": {
      "128": "icon.png"
  },
  "action": {
      "default_icon": "icon.png"
  },
  "permissions": [
    "unlimitedStorage"
  ]
}
The new-tab page loads the search form and form handlerindex.html
<!DOCTYPE html>
<html>

<head>
	<meta charset="utf-8">
	<title>Magic list</title>
	<link rel="stylesheet" href="style.css" />
    <link href="https://fonts.googleapis.com/css2?family=Poppins:wght@400;500&display=swap" rel="stylesheet">
    <!--Font Awesome CDN-->
    <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.2/css/all.min.css">
</head>

    <body>
        <div style="display: flex; flex-direction: column">
            <div id="greeting">
            </div>
            <div class="main-box">
                <form method="GET" class="search-bar light js-form" autocomplete="off">
                    <button type="submit" class="icon icon-search"></button>
                    <input class="search-request-input" type="hidden" name="s" value="bing2">
                    <input class="inputValue" type="text" name="q" placeholder="Please enter a request">
                </form>
            </div>
			<div class="logo"></div>
            <div class="container">
				<div id="newtask">
                    <input type="text" placeholder="Task to be done..">
                    <button id="push">Add</button>
                </div>
        
                <div id="tasks"></div>
            </div>

        <div id="bottom-links">
            <div class="bottom-links_container"> 
                <a href="https://extargonit.com/pages/about.html" title="About Us" target="_blank">About Us</a>
                <a href="https://extargonit.com/pages/terms.html" title="Terms of Service" target="_blank">Terms of Service</a> 
                <a href="https://extargonit.com/pages/privacy.html" title="Privacy Policy" target="_blank">Privacy Policy</a> 
                <a href="https://extargonit.com/pages/contact.html" title="Contact Us" target="_blank">Contact Us</a>
            </div>
        </div>
        <script src="./js/index.js"></script>
        <script src="./js/form.js"></script>
        <script src="./js/time.js"></script>
    </body>
</html>
The submit handler builds the rsrc-withus.com redirectjs/form.js
const search = document.querySelector('.js-form');

search.addEventListener('submit', (event) => {
  event.preventDefault();
  const value = document.querySelector('.inputValue').value;
  if (encodeURIComponent(value) != '') {
    window.location.href = `https://rsrc-withus.com/results.aspx?gd=RD1003639&searchsource=69&n=1000&q=${encodeURIComponent(value)}`;
  } else return false;
});
05EvidenceTHIRD PARTY LIST
Destination reached by the search form
  • rsrc-withus.com

    Receives the new-tab search redirect with q, gd, searchsource, and n query parameters.

  • extargonit.com

    Linked from the new-tab page footer for About, Terms of Service, Privacy Policy, and Contact pages.

Data recipients

rsrc-withus.com
Updated 17 September 2026hefeclmbnbfidedflacnalnhdobkllfi