Is Ultimate Office Tools safe?

Medium risk

Ultimate Office Tools sends new-tab search queries to f.frequentvisitor.com with a hardcoded affiliate token.

Ultimate Office Tools replaces the browser's new tab page with its own search page. When a user submits a search there, the extension redirects the query to f.frequentvisitor.com along with a hardcoded affiliate token.

Mediastinctv1.2Chrome Web Store
45Risk
Who publishes it

Mediastinct® Limited - 1 other listing from the same operator, none carrying a finding

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
Mediastinct
Declared legal entity
Mediastinct® Limited
Registered address
No. 5, 17/F Strand 50, 50 Bonham Strand, Sheung Wan 852, Hong Kong
Registered contact
Mediastinct

Same store account

1 other listing published from this account, 1k+ users between them, none of them carrying a finding.

Shared hosts - 1 hostname

Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.

mediastinct.com
Also called by 9 other listings, including Messenger Central

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Findings

New-tab searches are sent to frequentvisitor.com with an affiliate token

When you submit a search from Ultimate Office Tools' new-tab page, the extension redirects that query to f.frequentvisitor.com.

The request includes the search text you entered and a hardcoded affiliate token in the URL.

Severity
Medium unwanted
Type
Unexpected
CWE
CWE-359
Source
Dynamic sandbox
What actually happens
You did this

The user submits a search from the extension's new-tab page.

The extension did this

The extension redirects the entered query to f.frequentvisitor.com with a hardcoded affiliate token.

Captured request
GEThttps://f.frequentvisitor.com/?&k=59&token=<redacted>&keyword=...&n=1
Fields in the request
  • Search text
    quarterly tax forms (illustrative)

    The words typed into the new-tab search form are included in the redirect URL.

Where it sends data

Destinations our analysis observed Ultimate Office Tools contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • f.frequentvisitor.com

    Ultimate Office Tools sends data to f.frequentvisitor.com. No other extension we have analysed sends data here.

Updated 30 September 2026ldbhojoiaggmgkjcepnmcebablbgpbfk