Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: InstaSpeedTest

CRITICAL RISKRemoved from Chrome Web Store

InstaSpeedTest

ID: nhnemgmhhiolnimcjmalafoaficfglfe

Could be malicious

Extension Info & Metadata

Status

Removed

Version

2.0.5

Size

0.01 MB

Rating

4.8/5

Reviews

Users

86,463

Type

Extension

Updated

Nov 26, 2020

Publisher Contextual Analysis

Author: InstaSpeedTestView Profile
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

86,463

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Test your internet speed.

InstaSpeedTest makes a series of tests to determine the speed of your internet connection and compares it with the median of your country. It also shows you what services your current internet speed allows you to use.

User Growth

No data available

No user growth data available for this extension

Rating Count

No data available

No rating count data available for this extension

Average Rating

No data available

No rating data available for this extension

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical0

High2

Medium2

Low0

Versions scanned

Showing 1 of 4 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
2.0.3 Code review	4

Extension Version	Code Review Findings
2.0.3	4

Files with findings

2 distinct paths — top paths by unique finding count:

background-script.js3
manifest.json1

S.No.	Category	Severity	File	Summary	Found in Version
1	Other	high	background-script.js (line 35)	On install or update, the extension closes all Chrome Web Store tabs displaying its own listing. This prevents users from reading reviews, reporting the extension, or easily uninstalling. No legitimate extension requi…	2.0.3
2	Other	high	manifest.json (line 89)	The bundled manifest.json includes the 'tabs' permission, but the published CWS manifest summary only lists 3 permissions: instaspeedtest.com/* and storage. This discrepancy could indicate the reviewer-approved manife…	2.0.3
3	Privilege Escalation	medium	background-script.js (line 4)	The extension programmatically injects content-script.js into every single browser tab across all windows (except chrome:// pages). This goes far beyond the content script's declared match patterns in manifest.json. W…	2.0.3
4	Tracking	medium	background-script.js (line 1)	On installation, the extension creates an iframe to nimisfactum.com (a domain unrelated to the branded InstaSpeedTest service) passing the extension ID as a query parameter. Using a separate, opaque tracking domain fo…	2.0.3

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

195

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


instaspeedtest.com	-	https://instaspeedtest.com
nimisfactum.com	-	https://nimisfactum.com
clients2.google.com	/service/update2/crx	https://clients2.google.com/service/update2/crx
speedtest.local	/*	http://speedtest.local/*
www.instaspeedtest.com	/*	https://www.instaspeedtest.com/*
instaspeedtest.com	/*	https://instaspeedtest.com/*
www.google.com	/*	https://www.google.com/*
www.google.ad	/*	https://www.google.ad/*
www.google.ae	/*	https://www.google.ae/*
www.google.com.af	/*	https://www.google.com.af/*

Showing 1 to 10 of 200 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No IP addresses found

4.8 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

It was nice

Madalyn Langley·22 Dec 2020

excellent

Valeriy Ash·22 Dec 2020

so cool

Karen Shafer·21 Dec 2020

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

InstaSpeedTest

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 4 Versions4

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating