Is Temporary Contacts – Temp Phone Number and Temp Mail Instantly safe?

Medium risk

Temporary Contacts sends new-tab search terms to api.tempcontacts.com before running the search.

When you use the extension's new-tab search box, it Base64-encodes the entered text and requests api.tempcontacts.com/s with that value before performing the search. The request includes browser credentials for api.tempcontacts.com, and then the extension either invokes Chrome's search API for Google or opens the selected search engine URL.

ReceiveSMSS Dev teamv1.4.0Chrome Web Store
45Risk
Who publishes it

ReceiveSMSS Dev team - no other listings under this identity

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
ReceiveSMSS Dev team
Website
api.tempcontacts.com/terms

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Findings

New-tab searches are sent to api.tempcontacts.com before search runs.

When you use the extension's new-tab search box, the search term you enter is sent to api.tempcontacts.com before the browser search runs.

The request carries the form input from the new-tab page to the extension operator's API endpoint.

Severity
Medium unwanted
Type
Unexpected
CWE
CWE-359
Source
Dynamic sandbox
What actually happens
You did this

The user submits a query from the extension's new-tab search box.

The extension did this

The extension sends the entered search term to api.tempcontacts.com before running the browser search.

Captured request
GEThttps://api.tempcontacts.com/s
Fields in the request
  • Search box text
    weather tomorrow (illustrative)

    This is the term you entered into the extension's new-tab search form, which can reveal what you are trying to find.

What it can do

Permissions this extension asks for, as declared in version 1.4.0. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Run searches with your default search engine

    search

Where it sends data

Destinations our analysis observed temporary-contacts-%E2%80%93-temp contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • api.tempcontacts.com

    temporary-contacts-%E2%80%93-temp sends data to api.tempcontacts.com. No other extension we have analysed sends data here.

Updated 30 September 2026ddphbdkahbaeljfmajjnaomjbhkdimdl