Motiontabs Best Live Wall
🔍 Security Report Available View on Chrome Web StoreChrome will indicate if you already have this installed.
Overview
Motiontabs is Your New Favorite Tab
With every new tab, you will get a new motion wallpaper which will inspire you to be more productive and look at beautiful video tabs.
This live wallpaper extension is suitable for Mac OS, Windows Os & Chrome OS.
This beautiful motion background extension has only around 10 MB which is a lot less than many other video tabs or live wallpaper extensions.
With a very clean look, we eliminated all distractions which might result in you procrastinating and lose your focus. The visual appearance is very simple and elegant.
ABOUT THE FEATURES
* New motion tab with every new window. Amazing cities of worldwide famous destinations will appear randomly. We will make sure that we post more amazing live wallpapers. For now, we've managed to make great live images of London, England; Toscana, Italy; Hong Kong, China; New York, USA; Paris, France; Florence, Italy. We are preparing new material and we will share it as soon as possible.
**YOU ASKED SO WE GOT IT***
*Upload you favorite live wallpaper and use it! - make sure you upload it in mp4 format.
* Delete any live wallpaper you previously downloaded anytime!
* Read interesting facts. We weren't lazy and we got some interesting information regarding the live city wallpapers you got with this extension. With every new live background, just by clicking on the arrow in the lower left corner you can read an interesting fact about: London, England, Florence, Italy, Toscana, New York, China, Paris and more. Some of the live wallpapers do not have interesting facts - we will add more with time.
* Set your favorite live background as default motion new tab. By clicking on the specific motion wallpaper or live theme you will have that exact background with every opening. If you want to go back to the default version just unmark the live wallpaper or motion background of the beautiful cities and traveling destinations.
* Location and time. No matter what time zone you are, you will know the time and location - this feature is sometimes not completely accurate but please send us feedback and we will try to fix it. You may hide or show the location and time in the settings.
*Affiliate links - In order to support our business we have added our partners offers within the interface as it supports our developers and helps us sustain the product. You will find these products in the central lower area next to most visited websites. Also by clicking on the store icon in the left corner you can access more of these offers.
Search regularly in Omni Box. You may add or remove the search bar in the settings
Put your Motiontab on fullscreen so you can enjoy the screensaver experience. Just by clicking on the full screen icon, the live wallpaper will cover your screen. Press Escape button to get back to browsing. This also helps if you want to go for a break from your desk and leave your computer unattended.
Most visited websites will help you focus more on your daily tasks and will help you reach out to what you are searching for every day. Live wallpapers are the premium part of this :)
Get easy access to your history and re-visit the webistes you visited. / This feature will be upgraded soon.
Feel great and have a great day! Enjoy your new cool live wallpapers!
You can remove the extension by right clicking on the icon in the toolbar, and selecting - remove from Chrome.
DISCLAIMER:
All photos are taken from Pixabay, Unsplash, or Pexels and are edited. All copyright goes to the creators of the material. If there should be any problems with the photos and live wallpapers please let us know and we will resolve the issue as soon as possible. Motion wallpapers and live backgrounds are surely the future and we enjoy an elegant live theme, and we hope you will too.
Contact us if you have some suggestions, feedback or ideas: office@motiontabs.com
Also, please donate so we can continue with upgrading our product - we love working on this and providing more value. Thank you
If you like our extension we would appreciate it if you could give us feedback or a review. We would like to improve our extension and your opinion is highly valuable.
Motiontabs is free and it will always be free.
UPDATE 5/6/2025
We have upgraded the product and we are constantly investing in efforts to cr ceate a more valuable experience. However, due to the nature of the product, its free and we are not generating revenue from any enterprise or investor, we are collaborating with companies that are helping us monetize extensions with relevant ads.
We appreciate your kind support and encouragement to proceed with our development. We listen to you and your needs, so as always, feel free to report any issue or problem. And thank you for supporting our small business
Tags
Privacy Practices
Security Analysis — Motiontabs Best Live Wall
Permissions
Code Patterns Detected
External Connections
What This Extension Does
Motiontabs Best Live Wall enhances Chrome by providing live wallpapers and motion themes for new tabs, aiming to inspire productivity with visually engaging content. It's designed for users who want a more dynamic browsing experience without distractions. The extension is suitable for Windows, Mac OS, and Chrome OS.
Permissions Explained
- backgroundexpected: Allows the extension to run in the background even when no tab is open, so it can load new live wallpapers automatically.
Technical: Grants access to the Chrome Extension Background API. Enables persistent execution and event handling for long-running tasks like updating content or managing state across sessions. - storageexpected: Used to save user preferences, such as default wallpapers or settings related to the extension's behavior.
Technical: Accesses Chrome's storage API (chrome.storage), allowing persistent data storage on device. Could potentially be used for tracking or storing sensitive information if misused. - unlimitedStorageexpected: Gives the extension unlimited space to store local files, which may include downloaded wallpapers or cached content.
Technical: Permits access to unlimited disk space via chrome.storage.local. This can be used for storing large media assets but also raises concerns about excessive data usage or potential misuse if not monitored. - topSitesexpected: Enables the extension to access your most visited websites, which may be used for displaying quick links or integrating with other features like search bars.
Technical: Accesses Chrome's Top Sites API (chrome.topSites), providing a list of frequently visited domains. Could potentially allow tracking user browsing habits if combined with other data sources.
Your Data
The extension accesses and sends data to several external services, including its own servers (motiontabs.com) and analytics providers like Google Analytics. It retrieves location-based information through geoiplookup.io.
Technical Details
- domainmotiontabs.comprotocolHTTPSencryption_statusEncrypteddata_types
- User preferences
- Usage statistics
- domainjson.geoiplookup.ioprotocolHTTPSencryption_statusEncrypteddata_types
- IP address
- Geolocation data
- domainwww.google-analytics.comprotocolHTTPSencryption_statusEncrypteddata_types
- Usage tracking
- Session identifiers
Code Findings
The extension loads scripts from external domains directly into its background process, which could allow attackers to inject malicious code if those sources are compromised.
Technical: Code uses dynamic script loading via createElement('script') and sets src attributes pointing to remote URLs. This bypasses CSP restrictions for service workers and introduces a high-risk vector for code injection attacks.
💡 Common in extensions that rely on third-party libraries or analytics services, often used when direct inclusion isn't feasible due to manifest limitations.
The extension injects HTML content dynamically into the page using innerHTML. If not properly sanitized, this could allow attackers to execute scripts if malicious data is injected.
Technical: Code uses document.getElementById(...).innerHTML = ...; which can lead to cross-site scripting vulnerabilities if user-provided or untrusted input is passed without sanitization.
💡 Standard practice in many web apps for updating UI elements, especially when rendering dynamic content from APIs or user inputs.
The extension uses obfuscation methods like String.fromCharCode and charCodeAt to hide code logic, which is often a red flag for potentially malicious behavior.
Technical: Code contains patterns such as s = String.fromCharCode(109, 111, 116, 105, 111, 110) where strings are encoded using numeric values. This technique is commonly used to evade static analysis tools and make reverse engineering harder.
💡 Used in legitimate extensions for protecting intellectual property or hiding complex logic from casual inspection.
The extension creates script elements dynamically, which can be used to load and run arbitrary JavaScript code at runtime. This increases the risk of unauthorized behavior or exploitation.
Technical: Uses document.createElement('script') followed by setting .src or .text properties. These scripts are executed immediately upon insertion into DOM, posing a significant threat if loaded from untrusted sources.
💡 Used in extensions that need to load external libraries or perform runtime updates without requiring manifest changes.
The extension accesses your bookmarks and browsing history, which could be used for tracking user behavior or integrating with other features like search suggestions.
Technical: Uses chrome.bookmarks API and chrome.history API. These APIs allow full access to stored data including URLs, titles, and visit times. Could enable behavioral profiling if misused.
💡 Common in extensions that provide personalized content or integrate with browser features such as search or recommendations.
There may be a hardcoded secret key or token within the extension code, which could expose sensitive infrastructure if leaked.
Technical: Code inspection reveals potential strings resembling API keys or tokens (e.g., 'AIzaSy...'). If these are not environment variables but embedded in source files, they pose a security risk if exposed publicly.
💡 Often found in extensions using external APIs that require authentication; however, hardcoding credentials is discouraged unless properly managed via secure secrets management systems.
The extension makes HTTP requests to fetch data from various domains. This is typical for extensions that retrieve live content or update information regularly.
Technical: Uses both XMLHttpRequest (XHR) and the modern Fetch API to communicate with endpoints like motiontabs.com, geoiplookup.io, and Google Analytics. All connections are over HTTPS unless otherwise noted.
💡 Standard functionality in web extensions that fetch dynamic content or track usage metrics.
The extension sets up event listeners to respond to user actions and browser events, which is normal behavior for interactive extensions.
Technical: Uses addEventListener() calls on various Chrome APIs (e.g., chrome.tabs.onUpdated). These are standard mechanisms for reacting to changes in tab state or user interaction.
💡 Essential for any extension that needs to react dynamically to browser events, such as new tabs being opened or content changing.
Motiontabs Best Live Wall is a visually focused extension with some concerning behaviors around code obfuscation and dynamic script loading. While it aligns with its stated purpose of providing live wallpapers, the presence of potential XSS vectors and hardcoded secrets raises caution. Users should consider whether they trust the developer's handling of data privacy before installing.
