Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Load Time

CRITICAL RISKRemoved from Chrome Web Store

Load Time

ID: ibnkaefohbiphafkdlhhcdcfllmgacel

Could be malicious

Supported Languages

🇺🇸English

Extension Info & Metadata

Status

Removed

Version

2.0

Size

0.01 MB

Rating

4.5/5

Reviews

Users

5,000

Type

Extension

Updated

Jan 16, 2024

Publisher Contextual Analysis

Author: https://loadtime.netView Profile
Privacy: Privacy Policy
Help: Help Center
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes
Website: Visit

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

5,000

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

helps designers, developers, and casuals identify and monitor loadtimes of websites.

Discover a new era of online efficiency with Loadtime.net – the Chrome extension that not only simplifies web errors but also empowers you with comprehensive insights into page speed. Leave frustration behind as Loadtime.net analyzes and examines the speed of any website you visit, ensuring you make informed decisions about your online experience. Encounter server and DNS errors with ease as Loadtime.net transforms them into visually engaging pages, enriched with valuable information, promotions, and a user-friendly search bar featuring Yahoo! powered results. Bid farewell to mundane internet error pages and welcome a dynamic, informative, and swift online journey. To sustain our commitment to providing these essential features, Loadtime.net incorporates affiliate links and search feeds. Your support enables us to continually enhance and optimize your web exploration. Elevate your online experience with Loadtime.net – where analyzing page speed becomes the gateway to a more streamlined and informed internet.

User Growth

Showing data from Jan 16, 2024 to Apr 10, 2024

Versions

No change in user count

Compared to 3 months ago

1 version released in this period

Rating Count

Total: 2 ratings+1 (100%)

Average Rating

Current: 4.50 / 5.0+4.50

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical3

High2

Medium1

Low0

Versions scanned

Showing 1 of 1 scanned version with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
2.0 Code review	6

Extension Version	Code Review Findings
2.0	6

Files with findings

2 distinct paths — top paths by unique finding count:

service-worker.js5
loadtimes.js1

S.No.	Category	Severity	File	Summary	Found in Version
1	Network Interception	critical	service-worker.js (line 88)	For every HTTP 4xx or 5xx response on any site the user visits, the extension destroys the original tab and opens a new one pointing to pages.loadmetrics.net with the full URL and the per-user UUID embedded as query p…	2.0
2	Remote Code Loading	critical	service-worker.js (line 43)	The response from the remote API is used to directly open new tabs (`chrome.tabs.create`) or new windows (`chrome.windows.create`) with operator-supplied URLs. This is a remote command-and-control channel: the server …	2.0
3	Tracking	critical	service-worker.js (line 62)	When any DNS resolution error occurs for any URL, the extension silently redirects the current tab to a third-party domain (pages.loadmetrics.net), passing the full failed URL and a persistent per-user UUID. This hija…	2.0
4	Data Exfiltration	high	service-worker.js (line 124)	Every page load triggers a POST to api1.loadmetrics.net containing the full Navigation Timing API data (dns, connect, request, response timings) along with the per-user UUID and window/screen dimension details. This c…	2.0
5	Tracking	high	service-worker.js (line 137)	Both webRequest listeners are registered against the broadest possible URL pattern (all http and https traffic for main frame navigations), giving the extension visibility into every top-level navigation the user perf…	2.0
6	Unauthorized Data Collection	medium	loadtimes.js (line 20)	The content script runs on every page (:///*) and collects detailed screen geometry (outer/inner width and height, screen position offsets) in addition to full Navigation Timing data, then forwards it to the service…	2.0

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


www.w3.org	/1999/02/22-rdf-syntax-ns	http://www.w3.org/1999/02/22-rdf-syntax-ns#
ns.adobe.com	/tiff/1.0/	http://ns.adobe.com/tiff/1.0/
purl.org	/dc/elements/1.1/	http://purl.org/dc/elements/1.1/
ns.attribution.com	/ads/1.0/	http://ns.attribution.com/ads/1.0/
ns.adobe.com	/xap/1.0/	http://ns.adobe.com/xap/1.0/
fonts.googleapis.com	/css	https://fonts.googleapis.com/css?family=Roboto:400,500,700
clients2.google.com	/service/update2/crx	https://clients2.google.com/service/update2/crx
loadtime.net	-	https://Loadtime.net
*	/*	http:///
*	/*	https:///

Showing 1 to 10 of 20 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No IP addresses found

4.0 out of 5 · 1 most recent review

Text reviews

Positive

Negative

best stuff

Victoria Blecic·19 Mar 2024

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Load Time

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 1 Version6

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Extension Files

User Growth

Rating Count

Average Rating

User Reviews