Is PDF Clipper safe?

Medium risk

PDF Clipper sends new-tab search queries and affiliate parameters to find.vplay-fuel.com.

When you use the extension's custom new-tab search form, it submits the typed query to https://find.vplay-fuel.com/results.aspx using a GET request. The request also includes affiliate and search parameters in the URL, so the query and those parameters are visible to that recipient.

developersv1.981Chrome Web Store
47Risk
Who publishes it

PdfClipper - no other listings under this identity

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
developers
Declared legal entity
PdfClipper
Registered address
76839 Abby Ct, Palm Desert, CA 92211-7102, US
Registered contact
PDFclipper

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Findings

New-tab searches go to find.vplay-fuel.com with affiliate parameters

When you use PDF Clipper's new-tab search box, the extension submits your typed query to find.vplay-fuel.com with affiliate-style URL parameters, so the remote site receives your search text and routing context.

Severity
Medium unwanted
Type
Unexpected
CWE
CWE-359
Source
Dynamic sandbox
What actually happens
You did this

The user submits a search from the extension's new-tab page.

The extension did this

The extension sends the typed query and affiliate parameters to find.vplay-fuel.com.

Captured request
GEThttps://find.vplay-fuel.com/results.aspx
Fields in the request
  • Your search text
    weather tomorrow (illustrative)

    The words typed into the new-tab search box are sent as the query field.

  • Destination URL
    https://find.vplay-fuel.com/results.aspx

    The submitted search is sent to the results page on find.vplay-fuel.com.

What it can do

Permissions this extension asks for, as declared in version 1.981. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on every site you visit

    *://*/*

  • Keep running in the background while your browser is open

    background

  • Store data in your browser

    storage

Where it sends data

Destinations our analysis observed PDF Clipper contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • find.vplay-fuel.com

    PDF Clipper sends data to find.vplay-fuel.com. No other extension we have analysed sends data here.

Updated 30 September 2026meockjhjiadadpmodamdpcgbiajcmnid