Is Thai Wallpaper safe?

Medium risk

Thai Wallpaper sends new-tab search queries to goog.thai-wallpaper.com.

Thai Wallpaper replaces the browser's new-tab page with its own search page. When a user submits a search there, the extension redirects the tab to goog.thai-wallpaper.com with the typed query in the q URL parameter.

Suprivio LTDv1.0.1Chrome Web Store
45Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Findings

New-tab searches are sent to goog.thai-wallpaper.com

When you type a search in Thai Wallpaper's new-tab page, the extension redirects the query to goog.thai-wallpaper.com.

The typed form input is appended as the q URL parameter, so the remote site receives the search terms you entered.

Severity
Medium unwanted
Type
Unexpected
CWE
CWE-359
Source
Dynamic sandbox
What actually happens
You did this

The user submits a search from the extension-provided new-tab page.

The extension did this

The extension reads the typed search text and navigates to goog.thai-wallpaper.com with that text in the q URL parameter.

Captured request
GEThttps://goog.thai-wallpaper.com/?spmn=1&q=
Fields in the request
  • Your typed search query
    weather in Bangkok (illustrative)

    The search terms entered into the new-tab form are sent in the q URL parameter.

Observation

Dynamic analysis confirmed the new-tab override and the search form redirect behavior.

What it can do

Permissions this extension asks for, as declared in version 1.0.1. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on thai-wallpaper.com

    *://*.thai-wallpaper.com/*

Where it sends data

Destinations our analysis observed Thai Wallpaper contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • goog.thai-wallpaper.com

    Thai Wallpaper sends data to goog.thai-wallpaper.com. No other extension we have analysed sends data here.

Updated 21 September 2026goeejgejekdmchipdlphhabkcajbgojl