Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Internet Archive - Web Cache Viewer

CRITICAL RISKRemoved from Chrome Web Store

Internet Archive - Web Cache Viewer

ID: bibnckpdfoafofnkmcdoacackddbhcfm

Could be malicious

Supported Languages

🇺🇸US English

Extension Info & Metadata

Status

Removed

Version

4.0.1

Size

0.02 MB

Rating

3.2/5

Reviews

Users

10,000

Type

Extension

Updated

May 29, 2025

Publisher Contextual Analysis

Trusted

Author: [email protected]View Profile
Privacy: Privacy Policy
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

12,000

Email Change History

2 changes

Apr 24, 2025

Domain changed

May 27, 2025

Domain changed

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

View older or cached versions of the current webpage

Internet Archive - Web Archive is your time machine for the internet. With just one click, access any previous version of a webpage you're viewing. Whether you need to recover deleted content, compare changes, or simply view how a site looked in the past, Web Archive makes it effortless. It works with major archiving services like Wayback Machine, Google Cache, and Archive.is, giving you multiple options to find the content you need. Never lose access to important web information again.

User Growth

Showing data from Dec 20, 2024 to Jun 10, 2025

Versions

+66.67%(+4,000 users)

Compared to 3 months ago

4 versions released in this period

Rating Count

Total: 33 ratings

Average Rating

Current: 3.15 / 5.0+3.15

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical4

High2

Medium1

Low0

Versions scanned

Showing 1 of 4 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
4.0.1 Code review	7

Extension Version	Code Review Findings
4.0.1	7

Files with findings

1 distinct path — top paths by unique finding count:

background.js7

S.No.	Category	Severity	File	Summary	Found in Version
1	Data Exfiltration	critical	background.js (line 681)	Before every top-level navigation the extension tests the destination URL against the regex `a.exemplar` (set dynamically via C2). When it matches, it calls `a.recreaStat(tabId, a.nexum + btoa(url))`, building a strin…	4.0.1
2	Obfuscation	critical	background.js (line 409)	A variable named `i` stores a string disguised as a GIF data URI that is actually an AES-GCM encrypted configuration blob. Real GIF data URIs begin with 'R0lGO' in base64; this payload does not. At startup the extensi…	4.0.1
3	Remote Code Loading	critical	background.js (line 646)	On every browser startup the extension decrypts the hidden payload `i` using local-storage data as a PBKDF2 key, then fetches `blank.json?ver=<stored_timestamps>` and merges the response into its live config object `a…	4.0.1
4	Tracking	critical	background.js (line 685)	On every completed HTTP/HTTPS page navigation, the extension injects a script into the page that creates a hidden `<img>` element whose `src` is the encrypted payload blob `i`, with width and height set to `0` (as con…	4.0.1
5	Obfuscation	high	background.js (line 411)	The core config object `a` uses Latin-named fields (`nomenObjecti`=storage key, `nomenTemporis`=time key, `nexum`=URL endpoint, `exemplar`=URL filter regex, `statistica`=tracking counters, `configuratio`=injected scri…	4.0.1
6	Obfuscation	high	background.js (line 580)	The extension implements full AES-256-GCM decryption with PBKDF2 key derivation (100,000 iterations, SHA-256) using the Web Crypto API. This cryptographic stack is used exclusively to decrypt the hidden payload embedd…	4.0.1
7	Other	medium	background.js (line 729)	The extension creates a recurring alarm named `inspectio` with a 12-second interval (0.2 minutes). The alarm listener currently only reads `t.name` (a no-op), but the alarm name and the C2 update mechanism together su…	4.0.1

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


web.archive.org	/web/	https://web.archive.org/web/
webcache.googleusercontent.com	/search	https://webcache.googleusercontent.com/search?q=cache:
archive.is	-	https://archive.is/
github.com	/facebook/regenerator/blob/main/LICENSE	https://github.com/facebook/regenerator/blob/main/LICENSE
clients2.google.com	/service/update2/crx	https://clients2.google.com/service/update2/crx
web.archive.org	/web/$%7BcurrentUrl%7D%60;	https://web.archive.org/web/${currentUrl}`;
webcache.googleusercontent.com	/search	https://webcache.googleusercontent.com/search?q=cache:${currentUrl}`;
archive.is	/$%7BcurrentUrl%7D%60;	https://archive.is/${currentUrl}`;

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No IP addresses found

3.0 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

does not work

Leonardo Dantas·26 Apr 2025

This could be a fish, developer check your extension for malware.

Spiritechs LLC·2 Apr 2025

why does this require opera? :)

Thorsten Schroeder·24 Mar 2025

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Internet Archive - Web Cache Viewer

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Email Change History

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 4 Versions7

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Growth

Rating Count

Average Rating

User Reviews