Is Messenger Central safe?

Medium risk

Messenger Central sends new-tab search queries to srchms.com with a fixed affiliate identifier.

It replaces the browser's new tab page with its own search form. When a user submits a query there, the extension navigates to srchms.com and includes the query plus a fixed affiliate parameter in the URL.

Mediastinctv2.2Chrome Web Store
45Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Findings

New-tab searches are sent to srchms.com with an affiliate ID.

When you use Messenger Central's new-tab search box, the extension sends the text you entered to srchms.com along with a fixed affiliate identifier.

This occurs from the extension's own new-tab page after you submit a search.

Severity
Medium unwanted
Type
Unexpected
CWE
CWE-359
Source
Dynamic sandbox
What actually happens
You did this

The user submits a search from the extension's new-tab page.

The extension did this

The extension navigates to srchms.com with the entered query and a fixed affiliate identifier in the URL.

Captured request
GEThttps://srchms.com/?a=gsp_mfflexzpvl3cegikmogt19a_00_00&q=weather%20forecast&x1=1
Fields in the request
  • Your search query
    weather forecast (illustrative)

    The words typed into the new-tab search box are sent to the remote search endpoint.

Where it sends data

Destinations our analysis observed Messenger Central contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • srchms.com

    Messenger Central sends data to srchms.com. No other extension we have analysed sends data here.

Updated 21 September 2026hhljlkkodanjjefajfnmlihohigmfbbl