Is Insta Speed Tester Plus safe?

Medium risk

Insta Speed Tester Plus is medium risk. When you search from the extension's new-tab page, your query is placed in the URL for searchspeedtester.com before results load. The code sets Google as default, reads the search box, and navigates to dynamiclander with the query in q.

Diversify Media, Inc.v0.2.4Chrome Web Store
45Risk
Who publishes it

Diversify Media, Inc. - 1 other listing from the same operator, none carrying a finding

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
Diversify Media, Inc.
Website
instaspeedtester.com/contact

Same store account

1 other listing published from this account, 9k+ users between them, none of them carrying a finding.

DailyFactTab9k+Low

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Findings

New-tab searches go through searchspeedtester.com

When you search from the extension's new-tab page, your query is placed in the URL for searchspeedtester.com before results load.

The code sets Google as default, reads the search box, and navigates to dynamiclander with the query in q.

Severity
Medium unwanted
Type
Unexpected
CWE
CWE-359
Source
Dynamic sandbox
What actually happens
You did this

You submit a search from the extension's new-tab page.

The new-tab page is supplied by the extension rather than Chrome's default page.

The extension did this

The extension redirects the search through searchspeedtester.com with your query in the URL.

This occurs when the search provider remains set to the extension's default Google option.

URL parameters sent on the default search path
  • Search query
    weather tomorrow

    The words you typed into the new-tab search box are included in the request URL.

  • Channel ID
    6171

    This fixed value gives the receiving site context about which distribution path sent the request.

Captured request
GEThttps://searchspeedtester.com/dynamiclander/?chnm=6171&q=weather%20tomorrow

No request body is sent; no response body was recorded for this request.

The code that does this

The new-tab page supplies the search form and loads the handler script

Readable version

Search form in the deobfuscated new-tab page

newtab.html
<form id="frmSearch">  <div class="searchWrapper">     <img id='imgSearchLogo' class="search-logo" >    <label class="mag-icon" for="frmSearch"></label>    <input type="search" id="txtSearch" class="searchInput" name="" value="" required placeholder="Web Search" />    <button id="searchSubmit" class="search-button" title="Search"></button>    <!-- <datalist id="suggestedDatalist">  </datalist> -->    <!-- <span id="btnSearchBy" class="search-by" data-i18n="search_by"></span>    <ul id="searchByWrapper" class="search-by-wrapper">      <li id="btnGoogleSearch" data-i18n="search_by_google"></li>      <li id="btnBingSearch" data-i18n="search_by_bing"></li>      <li id="btnWikipediaSearch" data-i18n="search_by_wikipedia"></li>      <li id="btnDuckDuckGoSearch" data-i18n="search_by_duckduckgo"></li>    </ul> -->  </div></form><script src="scripts/popup.js" charset="utf-8"></script><script src="scripts/sortable.js" charset="utf-8"></script><script src="Scripts/randomColor.js" charset="utf-8"></script><script src="Scripts/createItems.js" charset="utf-8"></script><script src="Scripts/UI.js" charset="utf-8"></script>
The code that does this

The submit handler builds the searchspeedtester.com redirect

Readable version

Default search provider

scripts/popup.js
var config = {  searchBy: 'google',  wallpaper: 'default',  solidColor: '#2f3030',  searchBackground: '#383838',  tabBackground: '#222',  bookmarksState: false,  recentState: false,  searchClose: false,  bookmarkFolderId: -1,  activeTab: 0,  tabs: [    {      id: 0,      name: chrome.i18n.getMessage('main_tab')    }  ]};

Search form submit handler

scripts/popup.js
document.querySelector('#frmSearch').addEventListener('submit', e => {  e.preventDefault();  const txtSearch = document.getElementById('txtSearch');  if (txtSearch.searchType === 'google') {    location = 'https://searchspeedtester.com/dynamiclander/?chnm=6171&q=' + encodeURIComponent(document.getElementById('txtSearch').value);  }  else if (txtSearch.searchType === 'bing') {    location = 'http://www.bing.com/search?q=' + encodeURIComponent(document.getElementById('txtSearch').value);  }  else if (txtSearch.searchType === 'wikipedia') {    location = 'https://en.wikipedia.org/w/index.php?search=' + encodeURIComponent(document.getElementById('txtSearch').value);  }  else if (txtSearch.searchType === 'duckduckgo') {    location = 'http://www.duckduckgo.com/?q=' + encodeURIComponent(document.getElementById('txtSearch').value);  }});
External destination used by the default search path
    • searchspeedtester.com

    Receives the dynamiclander GET request containing the new-tab search query in the q parameter.

What it can do

Permissions this extension asks for, as declared in version 0.2.4. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read the sites you visit most

    topSites

  • Read and change your bookmarks

    bookmarks

  • Add items to the right-click menu

    contextMenus

Updated 30 September 2026cekjfhoafpagngaejnglodgcajecinnb