Is Pianoic safe?

Medium risk

Pianoic replaces the new tab with a search box that sends entered searches or URLs to rsrc2u.com.

Pianoic changes Chrome's new tab page to show a piano interface with a search box. When a user enters a search term or URL and submits it, the extension sends that value to rsrc2u.com with affiliate parameters in the request URL.

p4120767v1.0.2Chrome Web Store
45Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Findings

New-tab searches send queries or URLs to rsrc2u.com

When you type in Pianoic's new-tab search box and submit it, the extension sends the entered query or URL to rsrc2u.com.

The request includes affiliate parameters along with the q value, so the remote search service receives what you typed.

Severity
Medium unwanted
Type
Unexpected
CWE
CWE-359
Source
Dynamic sandbox
What actually happens
You did this

You submit a search or URL from the extension's new-tab page.

The extension did this

The extension builds a GET request to rsrc2u.com/results.aspx containing the entered q value and affiliate parameters.

Captured request
GETrsrc2u.com/results.aspx
Fields in the request
  • Search box text
    piano lessons (illustrative)

    The request carries what you typed into the new-tab search form.

  • Entered URL
    https://example.com/search (illustrative)

    If you type a URL instead of a search phrase, that URL can be sent as the q value.

Where it sends data

Destinations our analysis observed Pianoic contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • rsrc2u.com

    Pianoic sends data to rsrc2u.com. No other extension we have analysed sends data here.

Updated 30 September 2026micpniafejakjkkddbbafcplhakebhpd