Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Dragon Ball Super New Tab

CRITICAL RISKRemoved from Chrome Web Store

Dragon Ball Super New Tab

ID: boelillbfolbijkhknbmfdhehcppmcia

Could be malicious

Extension Info & Metadata

Status

Removed

Version

1.3.2

Size

0.04 MB

Rating

5.0/5

Reviews

12,474

Users

213,539

Type

Extension

Updated

Sep 22, 2019

Publisher Contextual Analysis

Author: Your Next New TabView Profile

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

409,517

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Dragon Ball Super Is An Awesome New Tab Product For All Dragon Ball Super Lovers Out There!

Welcome to the Dragon Ball Super new tab extension! enjoy a vast variety of the highest quality DBS, Dragon Ball, DBZ, Goku wallpapers in the world! Dragon Ball Super follows the adventures of Goku and his friends after defeating Majin Buu and bringing peace to Earth once again. Goku encounters beings far more powerful and defends the Earth against a powerful destructive deity. He attains the power of a god and learns his newly discovered powers under the gods of his universe. Goku travels to other universes to face more powerful opponents as well as nearly unstoppable foes. Except for epic themes, we also added to our Dragon Ball Super extension some awesome options and functionalities so you can fully enjoy it to the max. You can also pick out your favorite pics of Dragon Ball Super and they will be your background for as long as you like. Plus, we are constantly updating our Dragon Ball Super HD pics so you can enjoy the best backgrounds ever! A location-accurate weather widget, TDL, clocks and notepad and more fun features. Well, what's left to say? hope you enjoy our Dragon Ball Super great extension! If you have any questions about our Dragon Ball Super new tab extension or just want to give us some feedback, feel free to send us a message or write a review! We'd love to hear from you.

User Growth

No data available

No user growth data available for this extension

Rating Count

No data available

No rating count data available for this extension

Average Rating

No data available

No rating data available for this extension

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical2

High2

Medium1

Low0

Versions scanned

Showing 1 of 1 scanned version with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1.3.2 Code review	5

Extension Version	Code Review Findings
1.3.2	5

Files with findings

3 distinct paths — top paths by unique finding count:

my_script.js3
manifest.json1
newtab.html1

S.No.	Category	Severity	File	Summary	Found in Version
1	Phishing	critical	newtab.html (line 1)	Every new tab opened by the user is immediately and silently redirected to the external domain abountry.club/dbsuper via an instant meta-refresh. This is a classic browser hijacking pattern that monetises the user's n…	1.3.2
2	Remote Code Loading	critical	my_script.js (line 37)	The background service worker dynamically injects and executes a remote JavaScript file (`trckng_base.js`) from `abountry.club` at runtime. This is remote code loading in the highest-privilege extension context — the …	1.3.2
3	Code Injection	high	manifest.json (line 19)	The manifest CSP explicitly whitelists `'unsafe-eval'` alongside `abountry.club` as a trusted script source. The `unsafe-eval` directive allows `eval()`, `Function()`, and similar dynamic code execution in the backgro…	1.3.2
4	Unauthorized Data Collection	high	my_script.js (line 2)	The extension generates a persistent unique identifier (UID) per user on first install and stores it in `chrome.storage.local`. This UID is then exfiltrated to `abountry.club` both via the dynamically-loaded tracking …	1.3.2
5	Tracking	medium	my_script.js (line 35)	An uninstall beacon is registered to ping `abountry.club/miss-you` with both the extension ID and persistent UID when the user removes the extension. This signals to the operator's backend exactly when each tracked us…	1.3.2

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


clients2.google.com	/service/update2/crx	https://clients2.google.com/service/update2/crx
www.google-analytics.com	-	https://www.google-analytics.com
ssl.google-analytics.com	-	https://ssl.google-analytics.com
abountry.club;	-	https://abountry.club;
abountry.club	-	https://abountry.club
abountry.club	/dbsuper	http://abountry.club/dbsuper

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No IP addresses found

3.3 out of 5 · 8 most recent reviews

Text reviews

Positive

Negative

GOOD

Mas Mame·30 Mar 2019

awesome pics especially for free hand drawings

harley mcclellan·26 Oct 2018

Je le conseille, mais il y a certains points que j'aimerais souligner. Ce n'est pas une extension, mais une redirection vers un autre site qui lui-même vous dirige vers un autre site lorsque vous effectuez une recherche. Aussi, il y a assez peu d'images. Sinon, tout est simple d'accès, personnalisable (Heure, météo, calendrier etc..) et nous avons même une interface pour trouver des jeux rapidement !

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Dragon Ball Super New Tab

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 1 Version5

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Extension Files

User Growth

Rating Count

Average Rating

User Reviews