Is Hustle safe?
Hustle sends each keystroke typed into its new-tab search box to hustletab.io for autocomplete suggestions.
Hustle replaces the browser's new tab page with a search box. As you type a query, every keystroke is forwarded to hustletab.io to fetch live autocomplete suggestions, with no debounce, so partial queries leave the browser one character at a time. When a search is submitted, the query is routed through search.hustletab.io along with a persistent per-user identifier and install-week tracking parameters before the tab is redirected.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Findings
New-tab search box sends each keystroke to hustletab.io
Hustle replaces your new-tab page with its own search box.
As you type, it sends the text so far to hustletab.io on every keystroke, with no delay.
Dynamic analysis observed a marker leaving in a request to the vendor's domain.
You type a query into the new-tab search box.
Each character you enter raises an input event on the search field.
The extension sends the text typed so far to hustletab.io to fetch suggestions.
A GET request to hustletab.io/ff/suggest_ch.php carries the partial query in its query string, fired once per keystroke.
The search input handler calls the suggestion fetch on every keystroke
onInput: function (e) {
var t = e.target.value;
a(t); // update the visible input state
j(t); // fetch suggestions for the partial query
}var j = function (t) {
// no debounce — fires on each keystroke
return fetch(
"https://hustletab.io/ff/suggest_ch.php?query=" + (t != null ? t : "")
)
.then(function (r) { return r.json(); })
.then(function (suggestions) { /* render suggestions */ });
};| Field | Value | Why it matters | |
|---|---|---|---|
Partial search text | query=che (then chea, cheap, cheap+f, ...) | The characters you have typed into the new-tab search box so far. Accumulates one character per request until you finish typing. | |
Destination host | hustletab.io | The vendor's own first-party domain that receives the partial query and returns suggestions. |