Who makes Office Tools?

Office Tools is published by Triplex Media. The same operator publishes 1 other store listing, 1 of which carry a security finding.

What servers does Office Tools send data to?

Our analysis observed Office Tools sending data to find.digital-marketing-ads.com.

Is Office Tools safe?

Q: Is Office Tools safe?

Office Tools is medium risk. Typing in the Office Tools new-tab search box redirects your query to find.digital-marketing-ads.com. The query is placed in the URL with fixed tracking parameters, so the remote search endpoint receives your form input during that action.

Medium risk

Office Tools sends searches typed on its new-tab page to find.digital-marketing-ads.com.

Office Tools replaces the browser's new tab page with its own search form. When a user submits a search, the extension builds a results URL on find.digital-marketing-ads.com and includes the typed query in the q parameter.

Triplex Mediav0.11Chrome Web Store

45Risk

Who publishes it

Triplex Media - 1 other listing from the same operator, 1 of them carrying a finding

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher

Triplex Media

Same store account

1 other listing published from this account, 1k+ users between them. 1 of them carries a finding.

PDF Converter1k+Medium

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Findings

New-tab searches redirect typed queries to an ad search endpoint.

Typing in the Office Tools new-tab search box redirects your query to find.digital-marketing-ads.com.

The query is placed in the URL with fixed tracking parameters, so the remote search endpoint receives your form input during that action.

Severity: Medium unwanted
Type: Unexpected
CWE: CWE-359
Source: Dynamic sandbox

What actually happens

You did this

The user submits a search from the extension's new-tab page.

The extension did this

The extension redirects the typed query to find.digital-marketing-ads.com.

Captured request

GEThttps://find.digital-marketing-ads.com/results.aspx

Fields in the request

Search form input
quarterly report template (illustrative)
The text entered into the new-tab search box is sent as the search query.
Search result URL
https://find.digital-marketing-ads.com/results.aspx?gd=SY1003323&searchsource=69&q=quarterly%20report%20template (illustrative)
The destination URL identifies the remote search endpoint receiving the query.

Where it sends data

Destinations our analysis observed Office Tools contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

find.digital-marketing-ads.com
Office Tools sends data to find.digital-marketing-ads.com. One other extension we have analysed sends data here.