Is Streaming Search safe?

Medium risk

Streaming Search is medium risk. Dynamic analysis captured every search typed into Streaming Search's new tab page being sent to www.streamingsearch.xyz with a hardcoded affiliate parameter (pid=stresearchnt) before reaching Bing. Undisclosed in the Store listing.

Streaming-Searchv2.0Chrome Web Store
45Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Findings

New tab searches routed through affiliate endpoint without disclosure

Dynamic analysis captured every search typed into Streaming Search's new tab page being sent to www.streamingsearch.xyz with a hardcoded affiliate parameter (pid=stresearchnt) before reaching Bing.

Undisclosed in the Store listing.

Severity
Medium unwanted
Type
Unexpected
CWE
CWE-200
Source
Dynamic sandbox
What actually happens
You did this

You type a search into the new tab page and press Enter.

The extension did this

The extension sends your query to www.streamingsearch.xyz with a hardcoded affiliate tracking parameter before forwarding you to Bing.

The affiliate parameter pid=stresearchnt is embedded in the form as a non-visible field and is included in every search request.

Captured request
GEThttps://www.streamingsearch.xyz/chrome/newtab/searchresults.aspx?q=a planted marker value&pid=stresearchnt

HTTP 302 redirect to https://www.bing.com/search?q=a planted marker value, streamingsearch.xyz records the affiliate referral and forwards the user to Bing.

Parameters sent to streamingsearch.xyz on every new tab search
  • Your search query
    how to fix chrome extension errors

    The exact text you typed into the search box is sent to the affiliate endpoint before you reach Bing.

  • Affiliate tracking ID
    stresearchnt

    A hardcoded identifier (pid=stresearchnt) that attributes your search referral to the extension's operator for revenue purposes.

The code that does this

Hardcoded affiliate form in index.html (lines 24-28)

Readable version
<!-- Search form action points to streamingsearch.xyz affiliate endpoint --><!-- Off-screen input 'pid' carries hardcoded affiliate code 'stresearchnt' --><!-- User's query goes into 'q'; both are sent as URL parameters on submit --><form id="searchForm" class="search-holder" action="https://www.streamingsearch.xyz/chrome/newtab/searchresults.aspx"> <input type="text" name="q" placeholder="Search web"> <input type="hidden" name="pid" value="stresearchnt"> <!-- affiliate ID --> <input type="submit"></form>
Hosts involved in the search redirect chain
    • www.streamingsearch.xyz

    Affiliate search intermediary. Receives the search query and the hardcoded affiliate code pid=stresearchnt, then redirects to Bing. The operator earns referral revenue per search.

    • www.bing.com

    Final search destination. Receives the user's query after the streamingsearch.xyz redirect.

Updated 30 September 2026eimfpmlgkjccggbafpciimedbdoejffh