Is Sticky Note Board Extension safe?
Sticky Note Board Extension redirects new-tab search queries to search.notesticky-extension.com with an affiliate tracking ID.
The extension replaces the browser's new tab page with its own page and includes a search box. When a user submits a query there, it sends the typed search text to search.notesticky-extension.com with the hardcoded tracking ID 970663.
Who publishes itMonetize Engine - no other listings under this identity
Monetize Engine - no other listings under this identity
What this publisher told the store about itself, and the other listings that told it the same thing.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Findings
New-tab searches go to notesticky-extension.com
When you type a query into Sticky Note Board Extension's new-tab page and press search, the extension redirects to search.notesticky-extension.com.
The URL includes your text as q and the hardcoded affiliate value tid=970663.
- Severity
- Medium unwanted
- Type
- Unexpected
- CWE
- CWE-359
- Source
- Dynamic sandbox
You type a query into the extension's new-tab search box and activate search.
The extension redirects the browser to search.notesticky-extension.com with your query in the URL.
The same URL also carries the hardcoded tracking value tid=970663.
- Your search textproject planning notes
The words you type into the new-tab search box are sent as part of the destination URL.
- Affiliate tracking ID970663
The redirected search can be associated with the extension's configured partner identifier.
Navigation request generated by the extension's new-tab search handler.
The new-tab handler builds the redirect URL from the search input
Readable equivalent of the redirect logic
newtab.8cbecc6b.jsconst partner = { name: "Monetize Engine LLC", email: "contactus@monetizengine.com", address: "3 Prazka Str, Apartment 319, Kyiv 02090, Ukraine", country: "Ukraine", tid: 970663};function SearchBox() { const inputRef = useRef(); return ( <form name="search" id="searchForm" target="_parent" onClick={(event) => { event.preventDefault(); const query = inputRef.current.value; if (query.length > 0) { window.location.href = `https://search.notesticky-extension.com/?tid=${partner.tid}&q=${query}`; } }} > <input type="search" id="searchInput" name="q" ref={inputRef} autoComplete="off" placeholder="Search" /> <button id="searchBtn" type="submit" data-tooltip="Search">SEARCH</button> <input type="hidden" name="searchsource" value="69" /> <input type="hidden" name="SearchLocation" value="main" /> <input type="hidden" name="offlineTabSearch" value="true" /> </form> );}- search.notesticky-extension.com
Receives the new-tab search query in the q parameter and the extension's hardcoded tid=970663 tracking value.
What it can do
Permissions this extension asks for, as declared in version 0.1.1. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Read and change your data on notesticky-extension.com
*://*.notesticky-extension.com/*
Store data in your browser
storage
Where it sends data
Destinations our analysis observed Sticky Note Board Extension contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- search.notesticky-extension.com
Sticky Note Board Extension sends data to search.notesticky-extension.com. No other extension we have analysed sends data here.