Is NoteTab - Save Your Thoughts safe?

Medium risk

NoteTab - Save Your Thoughts sends new tab search queries and saved bookmark domains to external services.

The extension replaces the new tab page with a search form that submits entered queries to find.unav-web.com with affiliate parameters. When saved bookmarks are displayed, it requests icons from logo.clearbit.com using each saved bookmark domain in the request URL.

2050v0.0.6Chrome Web Store
45Risk
Who publishes it

2050 - 1 other listing from the same operator, none carrying a finding

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
2050

Same store account

1 other listing published from this account, 5k+ users between them, none of them carrying a finding.

NFT Tab5k+Low

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Findings

New tab searches go to find.unav-web.com with affiliate parameters

When you type a query into the extension's new tab search box, the query is sent to find.unav-web.com.

The request also includes affiliate-style parameters such as gd, searchsource, and n from the extension's overridden new tab page.

Severity
Medium unwanted
Type
Unexpected
CWE
CWE-359
Source
Dynamic sandbox
What actually happens
You did this

The user enters a search query in the extension's new tab search box.

The extension did this

The extension submits the query to find.unav-web.com with additional gd, searchsource, and n parameters.

Captured request
GEThttps://find.unav-web.com/results.aspx
Fields in the request
  • Search box input
    weather tomorrow (illustrative)

    The words typed into the new tab search box can reveal what the user is looking for online.

Observation

Dynamic analysis confirmed the new tab override and the GET search form that submits q with gd=RD1002788, searchsource=69, and n=0001 to find.unav-web.com/results.aspx.

What it can do

Permissions this extension asks for, as declared in version 0.0.6. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Store data in your browser

    storage

Where it sends data

Destinations our analysis observed NoteTab - Save Your Thoughts contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • logo.clearbit.com

    NoteTab - Save Your Thoughts sends data to logo.clearbit.com. 3 other extensions we have analysed send data here.

  • find.unav-web.com

    NoteTab - Save Your Thoughts sends data to find.unav-web.com. No other extension we have analysed sends data here.

Updated 30 September 2026igdekamfjpbdoijfaegpnmpokdjbgogb