Is Sport background pictures new tab safe?

Medium risk

Sport background pictures new tab sends new-tab search queries to rotating third-party feed domains.

When you type a query into the extension's new-tab search box and click Search, it opens a feed URL with the typed query in the q parameter. The destination is chosen from three third-party feed hosts and also includes fixed publisher and barcode identifiers.

sportnewtabv1.0.5Chrome Web Store
46Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Findings

New-tab search queries are sent to rotating search-feed domains

Using the new-tab search box sends your typed query to one of three third-party search-feed domains.

The request puts the query in the `q` parameter alongside fixed publisher and barcode identifiers.

Severity
Medium unwanted
Type
Unexpected
CWE
CWE-359
Source
Dynamic sandbox
What actually happens
You did this

The user enters text in the new-tab search box and clicks Search.

The extension did this

The extension opens a third-party feed URL that includes the typed query in the `q` parameter.

Captured request
GEThttps://feed.topappsparadise.com/?publisherid=71097&barcodeid=71097003&q=; https://feed.searchtechworld.com/?publisherid=71097&barcodeid=71097003&q=; https://feed.chill-tab.com/?publisherid=71097&barcodeid=71097003&q=
Fields in the request
  • Search box text
    baseball scores (illustrative)

    The words you typed into the new-tab search box are sent as the search query.

What it can do

Permissions this extension asks for, as declared in version 1.0.5. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on sportnewtab.com

    *://sportnewtab.com/ and 1 more

  • Read and change cookies, including the ones that keep you signed in

    cookies

  • Store data in your browser

    storage

Where it sends data

Destinations our analysis observed Sport background pictures new tab contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • feed.chill-tab.com

    Sport background pictures new tab sends data to feed.chill-tab.com. No other extension we have analysed sends data here.

  • feed.searchtechworld.com

    Sport background pictures new tab sends data to feed.searchtechworld.com. No other extension we have analysed sends data here.

  • feed.topappsparadise.com

    Sport background pictures new tab sends data to feed.topappsparadise.com. No other extension we have analysed sends data here.

Updated 30 September 2026lplhnlmhechelehnmapagbfihmcamgph