Is Ultimate Basketball Fan Extension safe?

Medium risk

Ultimate Basketball Fan Extension sends new-tab search queries to search.basketball-fan.com with a tracking ID.

The extension replaces Chrome's new-tab page with its own basketball-themed page. When a user submits a search from that page, it redirects the browser to search.basketball-fan.com with the typed query and the hardcoded tracking ID 963197 in the URL.

office@searchologic.comv0.2.4Chrome Web Store
45Risk
Who publishes it

office@searchologic.com - 2 other listings from the same operator, 2 of them carrying a finding

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
office@searchologic.com
Website
searchologic.com/Contact-Us/

Same store account

2 other listings published from this account, 30k+ users between them. 2 of them carry a finding.

Wingman Clock20k+Medium1ClickFav10k+Medium

Shared hosts - 1 hostname

Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.

searchologic.com
Also called by 2 other listings, including PremierLeague Stats

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Findings

New-tab searches sent to Basketball Fan search with tracking ID

When you search from the extension's new-tab page, your query is forwarded to search.basketball-fan.com.

The request URL includes the search terms and a hardcoded tracking ID, so the remote service receives both.

Severity
Medium unwanted
Type
Unexpected
CWE
CWE-359
Source
Dynamic sandbox
What actually happens
You did this

The user submits a search from the extension's new-tab page.

The extension did this

The extension redirects the browser to search.basketball-fan.com with the search query and tracking ID in the URL.

Captured request
GEThttps://search.basketball-fan.com/?tid=963197&q=basketball%20scores
Fields in the request
  • Search box input
    basketball scores (illustrative)

    The submitted form text can reveal what the user searched for from the new-tab page.

  • Request URL
    https://search.basketball-fan.com/?tid=963197&q=basketball%20scores (illustrative)

    The URL carries the search query together with tracking ID 963197 to the remote search service.

What it can do

Permissions this extension asks for, as declared in version 0.2.4. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on basketball-fan.com

    *://*.basketball-fan.com/*

  • Read and change your data on fiba.basketball

    *://*.fiba.basketball/*

Where it sends data

Destinations our analysis observed Ultimate Basketball Fan Extension contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • search.basketball-fan.com

    Ultimate Basketball Fan Extension sends data to search.basketball-fan.com. No other extension we have analysed sends data here.

Updated 30 September 2026ccalagljmhhnecblbkkpmlpodbcbgbak