Is Temora safe?

Medium risk

Temora sets itself as the default search provider and sends search and usage telemetry to fwsrc4you and Temora endpoints.

Temora changes Chrome's default search provider so address-bar searches go to fwsrc4you.com. When those searches redirect, it records first-search, last-search, and search-count values and sends usage records with extension, browser, OS, user-agent, and generated user ID data to webinline-usage.streamesh.net and i.thetemoraweb.com.

temoraextensionv0.0.3Chrome Web Store
46Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Findings

Temora routes address-bar searches through fwsrc4you telemetry.

Temora sets fwsrc4you as your default search provider, routing address-bar searches through fwsrc4you.com.

It also posts telemetry: a user ID, device metadata, and search counters, to webinline-usage.streamesh.net and i.thetemoraweb.com.

Severity
Medium unwanted
Type
Unexpected
CWE
CWE-359
Source
Dynamic sandbox
What actually happens
You did this

You use the address bar to run a search.

The extension did this

Temora routes the search through fwsrc4you.com and records search-usage telemetry.

Captured request
GEThttps://fwsrc4you.com?dgd=RD1005180&PCSF=true&q={searchTerms}
Fields in the request
  • Your search query
    weather tomorrow (illustrative)

    The address-bar search text can reveal what you are looking for.

  • Search request URL
    https://fwsrc4you.com?dgd=RD1005180&PCSF=true&q=weather%20tomorrow (illustrative)

    The request URL carries the search term and fixed campaign parameters to fwsrc4you.com.

  • Stored usage identifiers
    EXT_UID d7f3a1b2-...; search_counter 3 (illustrative)

    Stored values such as EXT_UID and search counters connect telemetry records to the same browser installation over time.

What it can do

Permissions this extension asks for, as declared in version 0.0.3. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on thetemoraweb.com

    https://*.thetemoraweb.com/*

  • Read and change your data on fwsrc4you.com

    https://*.fwsrc4you.com/*

  • Store data in your browser

    storage

  • Watch every request your browser makes

    webRequest

Where it sends data

Destinations our analysis observed Temora contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • webinline-usage.streamesh.net

    Temora sends data to webinline-usage.streamesh.net. 9 other extensions we have analysed send data here.

  • fwsrc4you.com

    Temora sends data to fwsrc4you.com. No other extension we have analysed sends data here.

  • i.thetemoraweb.com

    Temora sends data to i.thetemoraweb.com. No other extension we have analysed sends data here.

Updated 21 September 2026pmodckfilbcenflndkjoonecpdfnopee