Is More safe?
More is medium risk. Each search on any Google domain makes the extension read the search term from the URL and send it via GET to wazayi.com, with the extension version attached. Capture confirmed queries sent verbatim across all Google country domains.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Findings
Search queries sent to wazayi.com on every Google search
Each search on any Google domain makes the extension read the search term from the URL and send it via GET to wazayi.com, with the extension version attached.
Capture confirmed queries sent verbatim across all Google country domains.
You type a search into Google and press Enter.
The content script is injected at document_start on all google.* TLDs.
The extension reads your search term and sends it to wazayi.com.
A GET request carries your query verbatim as q=<term>&version=1.6 before the results page finishes loading.
| Origin | https://www.google.com |
| Field | Value | Why it matters | |
|---|---|---|---|
Search query | weatherforecast | The exact text you typed into the Google search box. | |
Extension version | 1.6 | The installed version of the extension, used to serve compatible ad content. |
Request assembly in search.js
// search.js lines 9-27
function getRequest(params, callback) {
var manifestData = chrome.runtime.getManifest();
var request = new XMLHttpRequest();
// appWebsite resolves to https://www.wazayi.com/en/
request.open('GET', chrome.i18n.getMessage('appWebsite') + 'extension?' + params + '&version=' + manifestData.version, true);
request.onload = function() {
if (this.status >= 200 && this.status < 400) {
callback(this.response);
}
};
request.send();
}
// Caller at line 103 — passes search term as q=
getRequest('q=' + q, function(html) { ... });
// init() at line 242 fires on every Google search page load
function init() {
const validSearchPage = window === window.top
&& /.(google)./.test(document.location.origin)
&& document.location.pathname === '/search';
if (!validSearchPage) return;
const q = getKeyword(); // reads window.location.search ?q=
searchKeyword(q);
}- www.wazayi.com
Receives all search queries and extension version. Returns ad HTML injected above Google organic results. Operator of the 'More' browser extension.