Is Bookmark Plus New Tab safe?

High risk

Bookmark Plus New Tab is high risk. Bookmark Plus New Tab routes new-tab searches through searchbookmarkplus.com for Google and Yahoo. It appends your typed words to a GET URL carrying affiliate channel dm6171, then navigates the tab there instead of Google or Yahoo directly.…

DiversifyMediav1.1.1Chrome Web Store
75Risk
Who publishes it

DiversifyMedia - no other listings under this identity

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
DiversifyMedia

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Findings

SeverityHIGH
ClassUNWANTED
TypeUnexpected
CWECWE-506
SourceAI SANDBOX

New-tab searches route through searchbookmarkplus.com

Bookmark Plus New Tab routes new-tab searches through searchbookmarkplus.com for Google and Yahoo.

It appends your typed words to a GET URL carrying affiliate channel dm6171, then navigates the tab there instead of Google or Yahoo directly.

01EvidenceCAUSE EFFECT
What actually happens
You did this

You submit a search from the Bookmark Plus New Tab search box.

The form in newtab.html uses input q and submit button searchSubmit.

The extension did this

The extension opens a searchbookmarkplus.com redirect URL containing your search terms.

The Google and Yahoo provider entries both use the same dynamiclander endpoint with channel dm6171.

02EvidenceFIELD TABLE
Fields placed into the redirect URL
FieldValueWhy it matters
Your search terms
weather tomorrowThe words you typed into the new-tab search box are included in the URL sent to the redirect host.
Affiliate channel
dm6171This identifies the redirect campaign or distribution channel associated with the request.
Selected provider
YahooChoosing Google or Yahoo still sends the search through the same redirect host before any search results page is reached.
Redirect URL
https://searchbookmarkplus.com/dynamiclander/?chnm=dm6171&q=weather%20tomorrowThis is the full navigation target the extension constructs after you submit the search.
03EvidenceNETWORK CAPTURE
Captured request
GEThttps://searchbookmarkplus.com/dynamiclander/?chnm=dm6171&q=weather%20tomorrow
The source code constructs this navigation URL; no request body is used for this GET navigation.
04EvidenceCODE COMPARE
The code that does this

Provider mapping and submit handler that build the redirect

What it actually does
Readable provider mapjs/newtab.js
constructor() {
  this.settings = {
    hideMode: false,
    hideSearchbox: false,
    tilesColorMode: false,
    tilesCount: 12,
    tilesPaddingCount: 1,
    columnCount: 6,
    containerWidthCount: 9,
    bodyBgAttr: 'bg1',
    backgroundImg: '',
    searchService: 'yahoo',
    searchServiceObj: {
      google: 'https://searchbookmarkplus.com/dynamiclander/?chnm=dm6171&q=',
      yandex: 'https://yandex.com/search/?text=',
      bing: 'https://www.bing.com/search?q=',
      yahoo: 'https://searchbookmarkplus.com/dynamiclander/?chnm=dm6171&q=',
      duckduckgo: 'https://duckduckgo.com/?q='
    }
  };
  this.bookmarks = [];
  this.history = [];
  this.initData();
}
Readable submit bindingjs/newtab.js
initHandlers() {
  const body = $(document.body);
  $(window).on('resize', (event) => this.renderDynamicStyle(event));
  body.on('click', (event) => this.bodyClick(event));
  body.on('submit', '#f', (event) => this.search(event));
  body.on('change', '[name="search-service"]', (event) => this.changeSearchService(event));
  body.on('click', '#hideSearchbox', (event) => {
    const checkbox = $(event.target);
    const wasChecked = checkbox.hasClass('c');
    checkbox.toggleClass('c').prop('checked', !wasChecked).change();
  });
}
Readable redirect functionjs/newtab.js
search(event) {
  event.preventDefault();
  const query = elById('q').value;
  const providerUrl = this.settings.searchServiceObj[this.settings.searchService] || 'https://searchbookmarkplus.com/dynamiclander/?chnm=dm6171&q=';
  location.href = query.slice(0, 4) === 'https' ? query : providerUrl + encodeURIComponent(query);
}
05EvidenceTHIRD PARTY LIST
External host reached by the search redirect
  • searchbookmarkplus.com

    Receives the dynamiclander GET navigation containing chnm=dm6171 and the q parameter with the user's search terms.

SeverityMEDIUM
ClassUNWANTED
TypeUnexpected
CWECWE-200
SourceAI SANDBOX

Top-site URLs sent to favicon and screenshot services

Bookmark Plus New Tab reads Chrome's top-sites shortcuts after install to build new-tab tiles.

Each top-site URL goes to Google's favicon service, and the full URL is also sent to mini.s-shot.ru for a thumbnail over HTTP.

01EvidenceCAUSE EFFECT
What actually happens
You did this

The user installs the extension.

The extension did this

The extension reads top-sites URLs and uses them in favicon and screenshot image requests.

02EvidenceNETWORK CAPTURE
Captured request
GEThttp://mini.s-shot.ru/
03EvidenceFIELD TABLE
Fields in the request
FieldValueWhy it matters
Visited page URL
https://example.com/page (illustrative)Identifies a site from the browser's top-sites history shortcuts.
Browsing-history shortcut
Top site tile entry (illustrative)Shows that the URL came from the browser's frequently visited sites list.

What it can do

Permissions this extension asks for, as declared in version 1.1.1. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your full browsing history

    history

  • Store an unlimited amount of data in your browser

    unlimitedStorage

  • Store data in your browser

    storage

  • Read the sites you visit most

    topSites

favicon
Updated 30 September 2026pileccchakeaiiooalioncnjcffggdgo