Is OpenOffice Calc online for xls spreadsheets safe?

Medium risk

OpenOffice Calc is medium risk. With this extension installed, each HTTP or HTTPS page navigation is sent to OffiDocs infrastructure, including the visited URL and a persistent 10-character user ID stored in Chrome local storage, linking browsing activity across sessions.

officeonlinesystemsv3.0.3Chrome Web Store
45Risk
Who publishes it

officeonlinesystems - 26 other listings from the same operator, 17 of them carrying a finding

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
officeonlinesystems
Registered address
Av. Dr. Arce 43, Madrid 28002, Spain

Shared hosts - 1 hostname

Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.

offidocs.com
Also called by 7 other listings, including Image editor PaintMagick for photos, PhotoStudio, Encrypt any email with CipherMail

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Findings

Every visited URL is sent to OffiDocs during navigation.

With this extension installed, each HTTP or HTTPS page navigation is sent to OffiDocs infrastructure, including the visited URL and a persistent 10-character user ID stored in Chrome local storage, linking browsing activity across sessions.

Severity
Medium unwanted
Type
Unexpected
CWE
CWE-359
Source
Dynamic sandbox
What actually happens
You did this

You navigate to an HTTP or HTTPS page or activate a tab.

The extension did this

The extension sends the visited URL and a persistent user identifier to OffiDocs infrastructure.

Captured request
GEThttps://www.offidocs.com/media/system/app/checkdownloadocalcx_2_nav.php
Fields in the request
  • Your browsing URL
    https://www.example.com/

    The page address can reveal the site and specific page you are viewing.

  • Browsing history pattern
    example.com, reddit.com/?rdt=65246

    Repeated navigation requests can build a record of pages visited over time.

Observation

Dynamic analysis confirmed requests to OffiDocs carrying hex-encoded visited URLs and the same persistent user identifier from Chrome local storage.

Updated 30 September 2026fiffkcnehndkebmpinoknndjbhdpbkcn