Is PDF Tab - PDF Converter in a New Tab safe?

Medium risk

PDF Tab is medium risk. Dynamic analysis captured GET requests to suggest.finditnowonline.com every time we typed in the new-tab search box. A react-autosuggest component fires this lookup after two keystrokes, regardless of engine. Not disclosed in the listing.

Tara McDridev1.0.2Chrome Web Store
45Risk
Who publishes it

Tara McDride - no other listings under this identity

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
Tara McDride

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Findings

SeverityMEDIUM
ClassUNWANTED
TypeUnexpected
CWECWE-359
SourceAI SANDBOX

Search keystrokes forwarded to undisclosed suggestion API on every engine

Dynamic analysis captured GET requests to suggest.finditnowonline.com every time we typed in the new-tab search box.

A react-autosuggest component fires this lookup after two keystrokes, regardless of engine.

Not disclosed in the listing.

01EvidenceCAUSE EFFECT
What actually happens
You did this

You type a search query into the new-tab search box.

After two characters are entered, an autocomplete lookup is triggered on every additional keystroke.

The extension did this

The extension sends your in-progress search query to suggest.finditnowonline.com.

This occurs regardless of which search engine you have selected in the new-tab settings (Google, Bing, Yahoo, or DuckDuckGo).

02EvidenceNETWORK CAPTURE
Captured request
GEThttps://suggest.finditnowonline.com/SuggestionFeed/Suggestion?format=json&q=<planted marker>
HTTP 200. JSON array of autocomplete suggestion strings returned.
03EvidenceFIELD TABLE
Data transmitted to suggest.finditnowonline.com on each keystroke
FieldValueWhy it matters
Search query (in progress)
best password manager forThe text you have typed so far, sent before you press Enter or click Search.
04EvidenceCODE COMPARE
The code that does this

Autocomplete component, search query forwarded unconditionally

What it actually does
// newtab.bundle.js line 11438 — getSuggestions method of the F (Autocomplete) component
getSuggestions = e => {
  let t = this,
    n = [];
  e.trim().toLowerCase().length;
  fetch("https://suggest.finditnowonline.com/SuggestionFeed/Suggestion?format=json&q=" + e).then((function(e) {
    return e.json().then((function(e) {
      n = e[1], t.setState({
        suggestions: n
      })
    }))
  }))
};

// onSuggestionsFetchRequested — fires on every keystroke (minLength: 2)
onSuggestionsFetchRequested = ({
  value: e
}) => {
  this.getSuggestions(e)
};
05EvidenceTHIRD PARTY LIST
Third-party host receiving search keystrokes
  • suggest.finditnowonline.com

    Autocomplete/suggestion API. finditnowonline.com is an affiliate search property, not one of the four selectable engines, and is not named in the listing.

What it can do

Permissions this extension asks for, as declared in version 1.0.2. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Store data in your browser

    storage

Updated 30 September 2026dheegnmioobjiclbacdpbgkhgieekfkg