Is My world clock safe?

Medium risk

My world clock redirects new-tab search queries to search-it.cc with affiliate parameters.

My world clock replaces Chrome's new-tab page with its own clock and search page. When a user types a search query there and presses Enter or the search button, the extension sends the query to search-it.cc with campaign and publisher parameters instead of using the form's visible Bing search action.

zikmediadev2v1.0.4Chrome Web Store
45Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Findings

New-tab searches are redirected to search-it.cc with affiliate parameters

When you use the extension's new-tab search box, your typed search term is redirected to search-it.cc instead of submitting directly to the visible Bing search form.

The request includes affiliate parameters and the search query in the URL.

Severity
Medium unwanted
Type
Unexpected
CWE
CWE-359
Source
Dynamic sandbox
What actually happens
You did this

The user types a query into the extension's new-tab search box.

The extension did this

The extension prevents the normal form submission and navigates the tab to search-it.cc with the encoded query and affiliate parameters.

Captured request
GEThttps://search-it.cc/?cid=4&pid=5&uh=48913&q=
Fields in the request
  • Search box text
    weather tomorrow (illustrative)

    The typed query reveals what you searched for from the extension's new-tab page.

Where it sends data

Destinations our analysis observed My world clock contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • search-it.cc

    My world clock sends data to search-it.cc. No other extension we have analysed sends data here.

Updated 30 September 2026pahnjgohnmmnpgchhheccpkihkloapdj