Interesting facts

ID: mdiodfeneidpffnhoncfnnmleokloapj

Could be malicious

Supported Languages

🇺🇸English

Extension Info & Metadata

Status
Removed
Version
0.1.8
Size
0.20 MB
Rating
4.3/5
Reviews
32
Users
36,567
Type
Extension
Updated
Jul 28, 2023
Category
Lifestyle Fun
Price
Free
Featured
Yes
Visibility
Listed
Mature
No
By Google
No
Trusted
Yes

Publisher Contextual Analysis

Trusted
Author
Dev-SpotsView Profile
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
No
Mailbox exists
Yes
Website
Visit
Total Extensions
6
Active
0
Obsolete
6
Listed
6
Unlisted
0
Total Users
128,025

Short and curious facts that will allow you to learn a little new about everything in the world.

The perfect extension for curious and adventures people. By adding this extension you will be presented with fascinating facts about various things in our world on a daily basis every time you open your browser. Users will also be presented with a digital clock and the current date at the bottom right corner when they open a new Chrome™ tab or window, and will be able to tell the current time of their location. By clicking “ADD TO CHROME”, I accept and agree to install the Interesting Facts extension and setting Chrome new tab search provider to Microsoft Bing as described by the service in our Terms of use and Privacy policy Privacy Policy: https://dev-spots.com/Privacy-Policy/ Terms of Use: https://dev-spots.com/Terms-Conditions/ You may uninstall the extension at any time To remove our extension from Google Chrome: 1) Click on the three vertical dots icon in the upper right-hand corner of your Chrome browser 2) Go to "Settings" 3) In the left menu that appears, click on "Extensions" 4) From the list of installed Extensions, locate the extension you would like to uninstall

Item
Type
Severity
Description
*://*.interestfact.com/*
Host
Medium
Host permission — access limited to this URL pattern.

The extension hijacks the new tab search box, redirecting all user searches to a third-party search engine (interestfact.com) with a tracking ID, bypassing the user's default search engine settings.

newtab.8cbecc6b.js (Line 19620)
C = d => {  d.preventDefault();  const u = o.current.value;  u.length > 0 && (window.location.href = `https://search.interestfact.com/?tid=${R5.tid}&q=${u}`)};

The background script performs unauthorized tracking by sending a POST request to a remote server (pxl.interestfact.com) immediately upon installation, including the extension's name and cookies.

background.5fadff2f.js (Line 1)
chrome.runtime.onInstalled.addListener(function(t) {      if (t.reason == "install") try {          fetch("https://pxl.interestfact.com/thx", {            method: "POST",            credentials: "include",            headers: {              Accept: "application/json",              "Content-Type": "application/json"            },            body: JSON.stringify({              extension_name: "Interesting facts"            })          })

By severity

Critical0
High1
Medium1
Low0

Versions scanned

Showing 1 of 3 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension VersionCode Review Findings
0.1.82

Files with findings

2 distinct paths — top paths by unique finding count:

  • background.5fadff2f.js1
  • newtab.8cbecc6b.js1
S.No.
Category
Severity
File
Summary
Found in Version
1Tracking
high
newtab.8cbecc6b.js (line 19620)The extension hijacks the new tab search box, redirecting all user searches to a third-party search engine (interestfact.com) with a tracking ID, bypassing the user's default search engine settings.
2Tracking
medium
background.5fadff2f.js (line 1)The background script performs unauthorized tracking by sending a POST request to a remote server (pxl.interestfact.com) immediately upon installation, including the extension's name and cookies.
URLs
28
IPv4
0
IPv6
0

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

Gain full insight into all external connections.

Upgrade for full visibility.

pxl.interestfact.com/thxhttps://pxl.interestfact.com/thx
clients2.google.com/service/update2/crxhttps://clients2.google.com/service/update2/crx
fb.me/use-check-prop-typeshttp://fb.me/use-check-prop-types
reactjs.org/docs/error-decoder.htmlhttps://reactjs.org/docs/error-decoder.html?invariant=
www.w3.org/1999/xlinkhttp://www.w3.org/1999/xlink
www.w3.org/XML/1998/namespacehttp://www.w3.org/XML/1998/namespace
www.w3.org/1999/xhtmlhttp://www.w3.org/1999/xhtml
www.w3.org/1998/Math/MathMLhttp://www.w3.org/1998/Math/MathML
www.w3.org/2000/svghttp://www.w3.org/2000/svg
fb.me/react-polyfillshttps://fb.me/react-polyfills
Showing 1 to 10 of 30 rows
Rows per page:

Gain full insight into all external connections.

Upgrade for full visibility.

No IP addresses found
Version
Size
Is Malicious
Findings
Permhash
0.1.9
Latest
0.20 MB
Malicious
N/A
0.1.8
0.20 MB
Malicious
2N/A
0.1.10
0.20 MB
Malicious
N/A
Showing 1 to 3 of 10 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files (scanned top 25 shared text files)

No comparable text files found between these versions.

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.