Is World Weather safe?
World Weather redirects new-tab search queries to search.world-weather-extension.com with a fixed tracking ID.
When you use the search box on World Weather's new-tab page, the extension sends the query to search.world-weather-extension.com with a fixed tracking parameter. Opening a new tab also loads remote S3-hosted content in an iframe, which sends a request to that S3 hostname.
Who publishes itoffice@marketinyo.com - no other listings under this identity
office@marketinyo.com - no other listings under this identity
What this publisher told the store about itself, and the other listings that told it the same thing.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Findings
New-tab searches are sent to World Weather search with a tracking ID.
World Weather's new-tab search box sends whatever you type to search.world-weather-extension.com with a fixed tracking tid.
The request also exposes your network IP address to that search service.
- Severity
- Medium unwanted
- Type
- Unexpected
- CWE
- CWE-359
- Source
- Dynamic sandbox
The user enters a query in the new-tab search box.
The extension redirects the query to search.world-weather-extension.com with a fixed tid value.
- Search queryweather tomorrow (illustrative)
The words you typed into the new-tab search box are sent as the query parameter.
- Network IP address203.0.113.42 (illustrative)
The receiving search service can see the network address used for the request.
What it can do
Permissions this extension asks for, as declared in version 1.4.1. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Read and change your data on world-weather-extension.com
*://*.world-weather-extension.com/*
Where it sends data
Destinations our analysis observed World Weather contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- extra-elements.s3.amazonaws.com
World Weather sends data to extra-elements.s3.amazonaws.com. No other extension we have analysed sends data here.
- search.world-weather-extension.com
World Weather sends data to search.world-weather-extension.com. No other extension we have analysed sends data here.