Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Dino Jump

CRITICAL RISKRemoved from Chrome Web Store

Dino Jump

ID: jjpicocpkfgkiojdnppgbjbidndbanbb

Could be malicious

Supported Languages

🇧🇩Bengali

🇧🇷Brazilian Portuguese

🇬🇧British English

🇧🇬Bulgarian

🇪🇸Catalan

🇨🇳Chinese (Simplified)

🇹🇼Chinese (Traditional)

🇭🇷Croatian

🇨🇿Czech

🇩🇰Danish

🇳🇱Dutch

🇺🇸English

🇪🇪Estonian

🇵🇭Filipino

🇫🇮Finnish

🇫🇷French

🇩🇪German

🇬🇷Greek

🇮🇳Gujarati

🇮🇳Hindi

🇭🇺Hungarian

🇮🇩Indonesian

🇮🇹Italian

🇯🇵Japanese

🇰🇷Korean

🇲🇽Latin American Spanish

🇱🇻Latvian

🇱🇹Lithuanian

🇲🇾Malay

🇮🇳Malayalam

🇮🇳Marathi

🇳🇴Norwegian

🇵🇱Polish

🇵🇹Portuguese

🇷🇴Romanian

🇷🇺Russian

🇷🇸Serbian

🇸🇰Slovak

🇸🇮Slovenian

🇪🇸Spanish

🇸🇪Swedish

🇮🇳Tamil

🇮🇳Telugu

🇹🇭Thai

🇹🇷Turkish

🇺🇦Ukrainian

🇺🇸US English

🇻🇳Vietnamese

Extension Info & Metadata

Status

Removed

Version

2.0

Size

3.52 MB

Rating

5.0/5

Reviews

Users

7,508

Type

Extension

Updated

Sep 8, 2022

Publisher Contextual Analysis

Trusted

Author: Dino Jump GameView Profile
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

7,508

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

New game in your browser. Your t-rex now can jump.

Have you ever expected that you will be playing two the most popular games simultaneosly. Doodle Jump and Running dinosaur now are turned into Dino Jump, so now it is avaliable in your browser. It is real action and arcade in one. Control keys are the same. More adventures are waiting for you. Enjoy jumping with your t-rex!

User Growth

Showing data from Jan 01, 2022 to Nov 06, 2022

Versions

+25.13%(+1,508 users)

Compared to 3 months ago

2 versions released in this period

Rating Count

Total: 6 ratings

Average Rating

Current: 5.00 / 5.0

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical3

High5

Medium0

Low0

Versions scanned

Showing 1 of 2 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
2.0 Code review	8

Extension Version	Code Review Findings
2.0	8

Files with findings

4 distinct paths — top paths by unique finding count:

background.bundle.js3
content.bundle.js3
background.js1
manifest.json1

S.No.	Category	Severity	File	Summary	Found in Version
1	Network Interception	critical	background.bundle.js (line 222)	Constructs an affiliate redirect URL embedding the partner MEMBER_HASH/PANEL_HASH plus the user's search query and the original destination URL. Search-result links are rewritten to route every click through this redi…	2.0
2	Phishing	critical	content.bundle.js (line 229)	Deceptive bait-and-switch on search result links: on mouseover the link's href is forced back to the ORIGINAL URL (so the browser status bar / hover preview shows the real destination), but on mouseup — the moment the…	2.0
3	Unauthorized Data Collection	critical	background.bundle.js (line 173)	Every search the user performs is exfiltrated: the user's search query (q), the list of result-page domains (tld), and the partner API key are POSTed to a remote endpoint controlled by mtusconf.de. The server returns …	2.0
4	Data Exfiltration	high	content.bundle.js (line 278)	On every https page load, the content script harvests the user's search query (from URL params and from the page's search-input element value) plus the page number and forwards it to the background page. Combined with…	2.0
5	Data Exfiltration	high	content.bundle.js (line 302)	When DOM parsing fails, the extension recursively walks document.body collecting tagName, id, className and href of every element (collectAllChildElementsParams) and ships the entire DOM tree fingerprint back to the b…	2.0
6	Privilege Escalation	high	manifest.json (line 11)	A 'Dino Jump' game extension declares broad host_permissions and a content script on every https site. There is no legitimate gameplay reason for an offline doodle-jump game to inject code on all sites — the manifest …	2.0
7	Remote Code Loading	high	background.bundle.js (line 69)	Background fetches a remote config from mtusconf.de that defines per-search-engine DOM selectors (searchBlockPatterns, linkBlockPatterns, linkPatterns, queryKeywordKeys, etc.). This is dynamic remote behavior control:…	2.0
8	Tracking	high	background.js (line 1)	The service worker hard-codes a 'universalSearch' API key, member hash, and panel hash. These are affiliate/partner identifiers used to credit redirected clicks (see redirect URL builder in background.bundle.js using …	2.0

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


mtusconf.de	/universal_search/v2/config/config.json	https://mtusconf.de/universal_search/v2/config/config.json
jquery.com	-	https://jquery.com/
sizzlejs.com	-	https://sizzlejs.com/
jquery.org	/license	https://jquery.org/license
jquery.org	/license	http://jquery.org/license
itunes.apple.com	/us/app/doodle-jump-free-be-warned/id456355158	https://itunes.apple.com/us/app/doodle-jump-free-be-warned/id456355158?utm_source=web%20game&utm_medium=online&utm_campaign=html5_pilot
play.google.com	/store/apps/details	https://play.google.com/store/apps/details?id=com.lima.doodlejump&utm_source=web%20game&utm_medium=online&utm_campaign=html5_pilot
github.com	/richtr/Full-Tilt	http://github.com/richtr/Full-Tilt
steffe.se	-	http://steffe.se
github.com	/schteppe/p2.js.git	https://github.com/schteppe/p2.js.git

Showing 1 to 10 of 20 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No IP addresses found

5.0 out of 5 · 2 most recent reviews

Text reviews

Positive

Negative

Me gusto muchísimo este juego, es muy divertido :D

cristian pinzon perez·3 Oct 2021

So fun!

Jamie Wellington·2 Jun 2021

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Dino Jump

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 2 Versions8

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating