Is Sound Recorder safe?

Medium risk

Sound Recorder loads a bundled ad SDK that reports the origin of every page you visit to a third-party ad server.

A content script runs on every http and https page you open, independent of the extension's audio-recording feature. It sends the page's origin, the extension's ID, and a persistent per-install identifier to MediaIntelliView's ad-delivery server, which responds with a sponsored banner rendered on the page. Over time this lets the ad server assemble a domain-level browsing history tied to that install.

EonF Media SLv1.1.0Chrome Web Store
45Risk
Who publishes it

EonF Media SL - 3 other listings from the same operator, 1 of them carrying a finding

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
EonF Media SL
Website
chrome-audiorecorder.mediaintelliview.com

Same store account

3 other listings published from this account, 100k+ users between them. 1 of them carries a finding.

Remove background40k+MediumWeb Activity Time Tracker - Block Websites, Pomodoro & Web Analytics30k+CleanWhat the Font30k+Clean

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Findings

Bundled ad SDK tracks the sites you visit using a persistent ID

Our dynamic analysis captured this audio-recording extension's bundled ad SDK sending a persistent per-install ID and the domain of every page you visit to an ad-tracking server, unrelated to its recording feature.

Severity
Medium unwanted
Type
Unexpected
CWE
CWE-359
Source
Dynamic sandbox
What actually happens
You did this

You open any http or https web page in a tab.

The extension did this

The bundled ad SDK sends your persistent install ID and this page's origin to an ad-tracking server.

This runs on every top-level navigation, independent of the extension's stated audio-recording purpose.

What gets sent on every page you visit
  • Persistent install ID
    abf043e5-71a8-45f8-b629-3387865123a7

    A random ID created on install that never changes. The ad server uses it to link everything sent from your browser over time.

  • Site you're visiting
    https://www.amazon.com

    The domain of the page you just opened, sent automatically on every navigation.

  • Extension ID
    fndkoopalankcpdahendaibfcldhnfei

    Chrome's internal ID for this extension, included so the ad server can tell which install sent the request.

Captured request
GEThttps://track.mediaintelliview.com/api/v1/banners/extension-deliver?extensionId=fndkoopalankcpdahendaibfcldhnfei&installId=abf043e5-71a8-45f8-b629-3387865123a7&format=300x250&pageUrl=https%3A%2F%2Fwww.amazon.com

200 OK, JSON banner payload whose click-through URL re-embeds the same install ID

Headers
Accept
application/json
Where this data goes
    • track.mediaintelliview.com

    Ad-delivery backend for the bundled MediaIntelliView (MIV) SDK. Receives a persistent install ID and the origin of every page visited.

Disclosure and opt-out

Disclosed in the store listing under an options-page toggle. The toggle ships unchecked by default, so tracking is on unless a user finds and disables it.

Where it sends data

Destinations our analysis observed Sound Recorder contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • track.mediaintelliview.com

    Sound Recorder sends data to track.mediaintelliview.com. No other extension we have analyzed sends data here.

Updated 30 September 2026fndkoopalankcpdahendaibfcldhnfei