Is PremierLeague Stats safe?
PremierLeague Stats sends new-tab search terms to prls.premierleaguestats-ext.com with a tracking ID.
PremierLeague Stats replaces the browser new tab page with its own search form. When you submit a search, it redirects the browser to prls.premierleaguestats-ext.com and includes the typed search term in the q URL parameter together with the fixed tracking ID 1020683.
Who publishes itsoftweart - no other listings under this identity, 1 shared hostname
softweart - no other listings under this identity, 1 shared hostname
What this publisher told the store about itself, and the other listings that told it the same thing.
Shared hosts - 1 hostname
Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Findings
New-tab searches sent to PremierLeague Stats search endpoint
When you search from the PremierLeague Stats new-tab page, the extension redirects the search terms to prls.premierleaguestats-ext.com.
The request places the raw query in the q URL parameter together with affiliate tracking id 1020683.
- Severity
- Medium unwanted
- Type
- Unexpected
- CWE
- CWE-359
- Source
- Dynamic sandbox
The user submits a search from the extension's new-tab page.
The extension redirects the search terms to prls.premierleaguestats-ext.com with affiliate tracking id 1020683.
- Search termspremier league fixtures (illustrative)
Shows what the user searched for from the new-tab form.
- Destination URLhttps://prls.premierleaguestats-ext.com/?tid=1020683&q=premier%20league%20fixtures (illustrative)
Carries the search request and affiliate tracking id in the browser address.
What it can do
Permissions this extension asks for, as declared in version 1.0.0. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Read and change your data on premierleaguestats-ext.com
*://*.premierleaguestats-ext.com/*
Read and change your data on cdn.footystats.org
*://*.cdn.footystats.org/*
Where it sends data
Destinations our analysis observed PremierLeague Stats contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- prls.premierleaguestats-ext.com
PremierLeague Stats sends data to prls.premierleaguestats-ext.com. No other extension we have analysed sends data here.