Is TabMetrics safe?
TabMetrics sends new-tab telemetry and search input to tracking and search services from its replacement new-tab page.
On each new-tab open, TabMetrics posts a stored extension profile plus user agent, browser/OS details, screen resolution, DPI scaling, and viewport values. As a user types in the new-tab search box, the query text is fetched from suggest.tab-metrics.com with the stored GID, and submitted searches are sent to icftink.com with stored tracking fields.
Who publishes itClientConnect Inc - 14 other listings from the same operator, none carrying a finding
ClientConnect Inc - 14 other listings from the same operator, none carrying a finding
What this publisher told the store about itself, and the other listings that told it the same thing.
Same operator - 14 listings
Published under a different store account, but sharing the registered address, contact or declared legal entity this one gave the store.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Findings
New-tab searches are sent to TabMetrics suggestion and search endpoints.
Typing in TabMetrics' new-tab search box requests suggestions from suggest.tab-metrics.com using the query and a stored tracking GID.
Submitting sends the query to icftink.com with tracking fields GID, D, ISID, N, M, L, isautomation.
- Severity
- Medium unwanted
- Type
- Unexpected
- CWE
- CWE-359
- Source
- Dynamic sandbox
The user types in or submits the new-tab search box.
The extension sends the search input to a suggestion endpoint with a tracking GID, then submits the search to icftink.com with stored tracking fields.
- Your search textweather this weekend (illustrative)
The words typed into the new-tab search field are sent for suggestions and search submission.
- Stored tracking valuesGID=7f3a1b2c-...; ISID=abc123 (illustrative)
Stored identifiers and campaign-style values can link the search action to the same browser installation or acquisition context.
Dynamic analysis confirmed the suggestion request path and the search form submission behavior from the database evidence. The captured rows identify suggest.tab-metrics.com for suggestion lookups and icftink.com for submitted searches.
What it can do
Permissions this extension asks for, as declared in version 0.0.5. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Read and change your data on tab-metrics.com
https://*.tab-metrics.com/*
Read and change your data on icftink.com
https://*.icftink.com/*
Store data in your browser
storage
Run its own code inside the pages you visit
scripting
Schedule its own background tasks
alarms
Run searches with your default search engine
search
Where it sends data
Destinations our analysis observed TabMetrics contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- webinline-usage.streamesh.net
TabMetrics sends data to webinline-usage.streamesh.net. 9 other extensions we have analysed send data here.
- icftink.com
TabMetrics sends data to icftink.com. No other extension we have analysed sends data here.
- suggest.tab-metrics.com
TabMetrics sends data to suggest.tab-metrics.com. No other extension we have analysed sends data here.