Is Password Generator safe?

Medium risk

Password Generator sends new-tab search or URL input to isrcfornow.com with affiliate parameters.

Password Generator replaces the browser's new-tab page with its own search form. When a user enters a search or URL there, the extension submits that text to isrcfornow.com/results.aspx along with affiliate parameters.

passgenerator30v1.4Chrome Web Store
45Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Findings

New-tab searches are sent to isrcfornow.com with affiliate parameters

When you use the Password Generator new-tab search box, the extension opens a request to isrcfornow.com/results.aspx.

The request includes your typed search or URL text along with affiliate-style parameters used by the destination service.

Severity
Medium unwanted
Type
Unexpected
CWE
CWE-359
Source
Dynamic sandbox
What actually happens
You did this

The user types a search term or URL in the extension's new-tab page and submits it.

The extension did this

The extension sends the entered text to isrcfornow.com/results.aspx with affiliate-style parameters.

Captured request
GEThttps://isrcfornow.com/results.aspx
Fields in the request
  • Your typed search text
    password manager comparison (illustrative)

    This is the search or address text submitted from the new-tab form.

  • Your typed URL
    https://example.com/account (illustrative)

    If a URL is entered, it can reveal the site the user intended to visit or search for.

Where it sends data

Destinations our analysis observed Password Generator contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • isrcfornow.com

    Password Generator sends data to isrcfornow.com. No other extension we have analysed sends data here.

Updated 30 September 2026lobodmfoijgjjknakkgloikjkfbgepmb