Is Wingman Clock safe?

Medium risk

Wingman Clock sends new-tab search queries to goog.Wingmanclock.com with an affiliate tracking ID.

When you use the search box on Wingman Clock's new-tab page, the extension redirects the browser to goog.Wingmanclock.com with your typed query in the URL. The request also includes the fixed tracking ID 986413.

office@searchologic.comv1.0.3Chrome Web Store
45Risk
Who publishes it

office@searchologic.com - 2 other listings from the same operator, 2 of them carrying a finding

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
office@searchologic.com
Website
searchologic.com/Contact-Us/

Same store account

2 other listings published from this account, 20k+ users between them. 2 of them carry a finding.

1ClickFav10k+MediumUltimate Basketball Fan Extension10k+Medium

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Findings

New-tab searches are sent to Wingman Clock affiliate endpoint

When you type a query into Wingman Clock's search box and click SEARCH, the extension navigates to https://goog.Wingmanclock.com/?tid=986413&q= with the search text appended.

The source reads the field value directly into that URL.

Severity
Medium unwanted
Type
Unexpected
CWE
CWE-359
Source
Dynamic sandbox
What actually happens
You did this

You click SEARCH after typing in the Wingman Clock new-tab search box.

The extension's manifest makes this page replace Chrome's default new-tab page.

The extension did this

The extension navigates the tab to goog.Wingmanclock.com with your search text in the URL.

The destination URL also includes the fixed affiliate ID 986413.

Fields placed in the search navigation URL
  • Your search query
    cws-canary-aopdlhjh-1700000000

    The text you type into the new-tab search field is placed in the URL sent to the search host.

  • Affiliate ID
    986413

    The request carries a fixed partner identifier along with your search.

  • Request URL
    https://goog.Wingmanclock.com/?tid=986413&q=cws-canary-aopdlhjh-1700000000

    The full address combines the destination host, affiliate ID, and search text in one browser navigation.

Captured request
GEThttps://goog.Wingmanclock.com/?tid=986413&q=cws-canary-aopdlhjh-1700000000

Browser navigation/request confirmed; no request body is present for this GET.

The code that does this

The new-tab override and search redirect handler

Readable version

Deobfuscated manifest shows the same new-tab override

manifest.json
{"update_url": "https://clients2.google.com/service/update2/crx","icons":{"16":"icon16.plasmo.754a7afc.png","32":"icon32.plasmo.1b596b7f.png","48":"icon48.plasmo.9c45e82d.png","64":"icon64.plasmo.696cf0ec.png","128":"icon128.plasmo.f5004619.png"},"manifest_version":3,"action":{"default_icon":{"16":"icon16.plasmo.754a7afc.png","32":"icon32.plasmo.1b596b7f.png","48":"icon48.plasmo.9c45e82d.png","64":"icon64.plasmo.696cf0ec.png","128":"icon128.plasmo.f5004619.png"}},"version":"1.0.3","author":"Search-o-logic LLC","name":"Wingman Clock","description":"Wingman Clock: Keep track of time with style. A sleek and reliable Chrome extension for your daily time management needs.","background":{"service_worker":"background.b78a8f7f.js"},"chrome_url_overrides":{"newtab":"newtab.html"},"permissions":["storage"],"host_permissions":["*://*.wingmanclock.com/*"]}}

Deobfuscated SearchBox exposes the same redirect logic

newtab.cf046328.js
const SearchBox = ()=>{    const inputElement = (0, _react.useRef)();    const redirect = (ev)=>{        ev.preventDefault();        const searchEl = inputElement.current.value;        if (searchEl.length > 0 && searchEl.trim() !== "") window.location.href = "https://goog.Wingmanclock.com/?tid=986413&q=" + searchEl;    };    return /*#__PURE__*/ (0, _jsxRuntime.jsxs)("div", {        className: "search-container animate__animated animate__backInDown searchBox",        children: [            /*#__PURE__*/ (0, _jsxRuntime.jsxs)("form", {                name: "search",                id: "searchForm",                target: "_parent",                children: [                    /*#__PURE__*/ (0, _jsxRuntime.jsx)("input", {                        type: "search",                        id: "searchInput",                        name: "q",                        ref: inputElement,                        "data-locale": "placeholder",                        autoComplete: "off",                        placeholder: "Search"                    }),                    /*#__PURE__*/ (0, _jsxRuntime.jsx)("button", {                        id: "searchBtn",                        onClick: redirect,                        type: "submit",                        "data-tooltip": "Search",                        children: "SEARCH"                    }),                    /*#__PURE__*/ (0, _jsxRuntime.jsx)("input", {                        type: "hidden",                        name: "searchsource",                        value: "69"                    }),                    /*#__PURE__*/ (0, _jsxRuntime.jsx)("input", {                        type: "hidden",                        name: "SearchLocation",                        value: "main"                    }),                    /*#__PURE__*/ (0, _jsxRuntime.jsx)("input", {                        type: "hidden",                        name: "offlineTabSearch",                        value: "true"                    })                ]            }),            /*#__PURE__*/ (0, _jsxRuntime.jsx)("div", {                id: "suggest",                children: /*#__PURE__*/ (0, _jsxRuntime.jsx)("div", {                    className: "hr"                })            })        ]    });};
External host receiving the search navigation
    • goog.wingmanclock.com

    Receives the search request URL containing tid=986413 and the text typed into the new-tab search box.

What it can do

Permissions this extension asks for, as declared in version 1.0.3. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on wingmanclock.com

    *://*.wingmanclock.com/*

  • Store data in your browser

    storage

Where it sends data

Destinations our analysis observed Wingman Clock contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • goog.Wingmanclock.com

    Wingman Clock sends data to goog.Wingmanclock.com. No other extension we have analysed sends data here.

Updated 30 September 2026aopdlhjhnhmlmpeopjcpdgbpjogkbenf