Dashboard

Dashboard

ID: pgdlbcdldbadflefccjpndngbgdenejd

Could be malicious

Supported Languages

πŸ‡ΊπŸ‡ΈUS English

Extension Info & Metadata

Status
Removed
Version
1.1
Size
0.07 MB
Rating
0.0/5
Reviews
0
Users
9
Type
Extension
Updated
May 13, 2021
Category
Productivity Workflow
Price
Free
Featured
No
Visibility
Listed
Mature
No
By Google
No
Trusted
No

Publisher Contextual Analysis

Author
https://board.wtfView Profile
MX records exist
No
Domain exists
No
Is disposable
No
Is role-based
No
Mailbox exists
No
Website
Visit
Total Extensions
1
Active
0
Obsolete
1
Listed
1
Unlisted
0
Total Users
9
Screenshot 1

Dashboard for the Chrome Browser.

πŸš€ Powerful Business Dashboard for the Chrome Browser πŸ“Ή Video Broadcasting (Join & Open a Room) πŸ“ž Private Multi Audio Communication (30+ User) ❎ Notebook with Autosave (Text Basis) 🎀 HQ Voice Recorder for Notes and more πŸ“… Monats Calendar for Daily Tasks 🎯 Task Planner (Autosave & Local Storage) πŸ”— Bookmark Manager (Privat Browser-less) 🌀️ Your Local Weather for 7 Days ⏰ Alarm Clock with Retro Alarm Sound πŸ’° Budget Planner (Small & Fast ) 🌈 Personalize the Dashboard with own Colors βœ”οΈ No Registration βœ”οΈ No Advertising βœ”οΈ No Tracking ⭐ The Dashboard runs complete with πŸ’Ύ Autosave πŸ—„οΈ Local Storage πŸ”Œ Offline Support

Item
Type
Severity
Description
Contextual Risk Factors
Risk Factor
High
The following context increases the overall risk:β€’ 15% increase: Older manifest version lacks modern security controls
background
Permission
Medium
This permission allows continuous background operation. Rated Medium because it can perform actions without user awareness, consume system resources, and maintain persistent connections.
tabs
Permission
Medium
This permission enables tab management and monitoring. Rated Medium because it can track open tabs, access tab metadata, and monitor user browsing patterns.
Older Manifest Version
Risk Factor
Medium
This extension uses Manifest Version 2

The background script immediately creates a pinned tab on every browser startup or extension wake. Creating pinned tabs automatically without explicit user action is a well-documented PUP/adware pattern used to ensure the publisher's website always remains open and prominent in the user's browser. Combined with a no-longer-accessible publisher email and removal from the Chrome Web Store, this behavioral fingerprint is consistent with an unwanted tab-hijacker.

main.js (Line 1)
chrome.tabs.create({  url: "newtab.html",  pinned: true,  selected: false,  active: true,})

The extension page embeds the publisher's remote website in a full-screen iframe and grants it camera and microphone access via the Permissions Policy `allow` attribute. Because this page is served from within the extension (elevated trust context), the remote site receives media device access without Chrome's normal per-origin permission dialog that would be presented if the user navigated to the same URL directly. While the stated features (video broadcasting, audio calls) explain the media need, this effectively lets the publisher's web server silently access the user's camera/microphone through the extension's privilege context.

newtab.html (Line 22)
<iframe src="https://dash.board.wtf" style="border:0px #ffffff none;" name="Dashboard" scrolling="yes" frameborder="0"  marginheight="0px" marginwidth="0px" height="100%" width="100%" allowfullscreen allow="camera;microphone"  allow="camera *;microphone *">  < /iframe>

By severity

Critical0
High0
Medium2
Low0

Versions scanned

Showing 1 of 1 scanned version with more than one unique finding. Counts are unique findings that include each version.

Extension VersionCode Review Findings
1.12

Files with findings

2 distinct paths β€” top paths by unique finding count:

  • main.js1
  • newtab.html1
S.No.
Category
Severity
File
Summary
Found in Version
1Other
medium
main.js (line 1)The background script immediately creates a pinned tab on every browser startup or extension wake. Creating pinned tabs automatically without explicit user action is a well-documented PUP/adware pattern used to ensure…
2Privilege Escalation
medium
newtab.html (line 22)The extension page embeds the publisher's remote website in a full-screen iframe and grants it camera and microphone access via the Permissions Policy `allow` attribute. Because this page is served from within the ext…
URLs
2
IPv4
0
IPv6
0

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

Gain full insight into all external connections.

Upgrade for full visibility.

clients2.google.com/service/update2/crxhttps://clients2.google.com/service/update2/crx
dash.board.wtf-https://dash.board.wtf

Gain full insight into all external connections.

Upgrade for full visibility.

No IP addresses found
Version
Size
Is Malicious
Findings
Permhash
1.1
Latest
0.07 MB
Malicious
2
Showing 1 to 1 of 10 rows
Rows per page:

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.