Is World Clock Tab safe?

Medium risk

World Clock Tab sends new-tab search queries to sthecfone.com with affiliate/source identifiers.

World Clock Tab replaces the browser new tab with a page that includes a search box. When a user submits a non-empty search, the query is sent to sthecfone.com in the URL along with hidden affiliate/source parameters.

worldclocktab2023v1.0.5Chrome Web Store
45Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Findings

New-tab searches are sent to sthecfone.com with source identifiers

When you search from World Clock Tab's new-tab page, the extension sends your search text to sthecfone.com in a GET request, along with affiliate and source parameters that identify the extension.

Severity
Medium unwanted
Type
Unexpected
CWE
CWE-359
Source
Dynamic sandbox
What actually happens
You did this

You submit a non-empty search from the extension's new-tab page.

The extension did this

The extension sends the search query to sthecfone.com with affiliate and source identifiers.

Captured request
GEThttps://sthecfone.com/results.aspx
Fields in the request
  • Your search query
    weather in Boston (illustrative)

    This is the text you entered into the new-tab search form before submission.

What it can do

Permissions this extension asks for, as declared in version 1.0.5. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Store data in your browser

    storage

Where it sends data

Destinations our analysis observed World Clock Tab contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • sthecfone.com

    World Clock Tab sends data to sthecfone.com. No other extension we have analysed sends data here.

Updated 30 September 2026mcjejfikfpmhcfbbaamhfolnhpnhfgnm