Is UrbanTabs safe?
UrbanTabs sends searches typed on its new-tab page to bseeksrc.com.
UrbanTabs replaces the browser's new-tab page with its own search form. When a user submits a search there, the extension places the typed query into a bseeksrc.com results URL and navigates the tab to that page.
Who publishes itpietechologiesinc - no other listings under this identity
pietechologiesinc - no other listings under this identity
What this publisher told the store about itself, and the other listings that told it the same thing.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Findings
New-tab searches are sent to bseeksrc.com
Submitting a search from UrbanTabs' new-tab page redirects to bseeksrc.com/results.aspx with the typed words in the q parameter.
The shipped bundle's form handler reads the search box value and builds that outbound URL on submit.
- Severity
- Medium unwanted
- Type
- Unexpected
- CWE
- CWE-359
- Source
- Dynamic sandbox
You submit a search from the UrbanTabs new-tab page.
The form is the search box shown on the browser's replacement new-tab page.
The page reads the typed query and sends the browser to bseeksrc.com with that query in the URL.
The redirect is built from the search box value plus fixed gd, searchsource, and n parameters.
- Your search phraseweather this weekend (illustrative)
The words you typed into the new-tab search box are included in the outbound results address.
- Search campaign codeRD1005073
This fixed value travels with the request and can describe which search integration produced it.
- Search source code58
This fixed value is sent with the search request and adds source context for the destination site.
- Results count parameter10000
This fixed value is appended to the same URL as the query and source identifiers.
Browser navigation to the search results endpoint; no request body is used for this GET navigation.
The new-tab form handler builds the outbound search URL
const SearchBox = () => { const searchInputRef = React.useRef(); function handleSubmit(event) { event.preventDefault(); const query = searchInputRef.current.value; if (query.length > 0 && query.trim() !== "") { window.location.href = "https://bseeksrc.com/results.aspx?gd=RD1005073&searchsource=58&q=" + query + "&n=10000"; } } return ( <div className="search-container searchBox"> <Logo /> <form onSubmit={handleSubmit} name="search" id="searchForm" target="_parent"> <input type="search" id="searchInput" name="q" ref={searchInputRef} data-locale="placeholder" autoComplete="off" placeholder="Type to search..." /> <button id="searchBtn" type="submit" data-tooltip="Search"> <FontAwesomeIcon color="#fff" icon={magnifyingGlassIcon} /> </button> <input type="hidden" name="searchsource" value="69" /> <input type="hidden" name="SearchLocation" value="main" /> <input type="hidden" name="offlineTabSearch" value="true" /> </form> <div id="suggest"><div className="hr" /></div> </div> );};- bseeksrc.com
Receives the results navigation from the new-tab search form, including gd=RD1005073, searchsource=58, the submitted q value, and n=10000 in the URL.
What it can do
Permissions this extension asks for, as declared in version 1.0.1. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Read and change your data on urbantabs.com
*://*.urbantabs.com/*
Where it sends data
Destinations our analysis observed UrbanTabs contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- bseeksrc.com
UrbanTabs sends data to bseeksrc.com. No other extension we have analysed sends data here.