Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Gucci Wallpapers New Tab

CRITICAL RISKRemoved from Chrome Web Store

Gucci Wallpapers New Tab

ID: phiplpjclmjdbbdcpjapkpgbbmkcfadj

Could be malicious

Supported Languages

🇧🇷Brazilian Portuguese

🇺🇸English

🇫🇷French

🇩🇪German

🇮🇳Hindi

🇮🇹Italian

🇯🇵Japanese

🇰🇷Korean

🇵🇹Portuguese

🇷🇺Russian

🇪🇸Spanish

🇹🇭Thai

🇹🇷Turkish

🇻🇳Vietnamese

Extension Info & Metadata

Status

Removed

Version

1.4.9.9

Size

18.43 MB

Rating

0.0/5

Reviews

Users

100,000

Type

Extension

Updated

Apr 24, 2022

Publisher Contextual Analysis

Trusted

Author: https://newtab.icuView Profile
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes

Total Extensions

128

Active

Obsolete

128

Listed

128

Unlisted

Total Users

4,515,043

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Gucci theme in new tab

Gucci Wallpapers New tab - an extension for your web browser that opens special settings for a new tab. Theme features Gucci Wallpapers New tab: ፠ Search bar Quick access to the largest and most well-known search engines in the world provides a theme search bar Gucci. ፠ Shortcuts Save your favorite sites to the theme shortcut panel Gucci Wallpapers New tab. You can go to important and frequently visited websites with just one click. ፠ Full HD wallpapers Instead of boring gray background, stunning Full HD wallpapers will appear in Gucci New Tab theme. ፠ News panel The bottom panel shows news videos from the world's official news agencies posted on the YouTube platform.

User Growth

Showing data from Jan 01, 2022 to May 31, 2022

Versions

+106282.98%(+99,906 users)

Compared to 3 months ago

4 versions released in this period

Rating Count

Total: 0 ratings

Average Rating

Current: 0.00 / 5.0

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical3

High3

Medium0

Low0

Versions scanned

Showing 1 of 4 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1.1.4.8 Code review	6

Extension Version	Code Review Findings
1.1.4.8	6

Files with findings

4 distinct paths — top paths by unique finding count:

barium577.js2
brink_pink_reticulum.js2
cornsilk_osmium.html1
manifest.json1

S.No.	Category	Severity	File	Summary	Found in Version
1	Remote Code Loading	critical	brink_pink_reticulum.js (line 21)	The persistent background page dynamically injects an iframe whose `src` is assembled at runtime from a remote URL including the extension ID and version. Because the URL is fully remote and the background page is per…	1.1.4.8
2	Remote Code Loading	critical	barium577.js (line 36)	The new tab page loads its entire visible content from a remote server, with the full URL including extension ID and version embedded. This gives the remote operator complete, real-time control over what users see on …	1.1.4.8
3	Tracking	critical	brink_pink_reticulum.js (line 1)	The background script beacons the extension ID and version to `start.newtab.icu` on every browser start and separately on install, allowing the operator to track individual users across sessions and distinguish fresh …	1.1.4.8
4	Obfuscation	high	barium577.js (line 2)	Multiple dead variables holding opaque numeric strings with color-name identifiers are spread throughout both JS files with no functional use. This is a deliberate obfuscation pattern — injecting semantic noise to fru…	1.1.4.8
5	Other	high	manifest.json (line 16)	The wildcard `"*"` in `web_accessible_resources` makes every extension resource (including all scripts and assets) accessible to any web page. This is a well-known fingerprinting and cross-origin communication vector:…	1.1.4.8
6	Privilege Escalation	high	cornsilk_osmium.html (line 19)	The iframe has both `allow-same-origin` and `allow-scripts` in its sandbox attribute simultaneously, which completely defeats the sandboxing — a same-origin sandboxed iframe with scripting enabled can remove its own s…	1.1.4.8

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


www.w3.org	/1999/02/22-rdf-syntax-ns	http://www.w3.org/1999/02/22-rdf-syntax-ns#
ns.adobe.com	/xap/1.0/	http://ns.adobe.com/xap/1.0/
purl.org	/dc/elements/1.1/	http://purl.org/dc/elements/1.1/
ns.adobe.com	/xap/1.0/mm/	http://ns.adobe.com/xap/1.0/mm/
ns.adobe.com	/xap/1.0/sType/ResourceEvent	http://ns.adobe.com/xap/1.0/sType/ResourceEvent#
ns.adobe.com	/xap/1.0/sType/ResourceRef	http://ns.adobe.com/xap/1.0/sType/ResourceRef#
ns.adobe.com	/photoshop/1.0/	http://ns.adobe.com/photoshop/1.0/
ns.adobe.com	/tiff/1.0/	http://ns.adobe.com/tiff/1.0/
ns.adobe.com	/exif/1.0/	http://ns.adobe.com/exif/1.0/
gucci.newtab.icu	-	https://gucci.newtab.icu/

Showing 1 to 10 of 20 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


1.4.9.9	IPv4	-

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Gucci Wallpapers New Tab

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 4 Versions6

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Growth

Rating Count

Average Rating