Extension Auditor
Extension Auditor
Sign Up

Kryopage

ID: idbdehpokikeobjcpgnleaaebmddflhi

Could be malicious

Supported Languages

🇺🇸English

Extension Info & Metadata

Status
Removed
Version
1.3
Size
2.24 MB
Rating
4.6/5
Reviews
71
Users
40,000
Type
Extension
Updated
Dec 7, 2023
Category
Productivity Workflow
Price
Free
Featured
No
Visibility
Listed
Mature
No
By Google
No
Trusted
Yes
Download CRX
Chrome Web Store
Report Issue

Publisher Contextual Analysis

Trusted
Author
https://kryopage.comView Profile
Privacy
Privacy Policy
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
No
Mailbox exists
Yes
Total Extensions
1
Active
0
Obsolete
1
Listed
1
Unlisted
0
Total Users
40,000

Kryopage Extension

Get Kryopage extension. By clicking "Add to chrome", I accept and agree to installing "Kryopage Extension" extension and setting Chromeâ„¢ newtab search to that provided by the service and the Terms of Use and Privacy Policy. search results will be powered by Microsoft Bing. Features: - Beautiful and Elegant: Change your new tab into a minimum and beautiful page. Remove all the distractions and focus on what matters. - Widgets: Get useful widgets such as translation widget, time zone widget and more. Privacy policy: https://kryopage.com/privacy Terms and conditions: https://kryopage.com/terms

Item
Type
Severity
Description
declarativeNetRequest
Permission
Critical
This permission allows the extension to define rules to block, redirect, or modify network requests. Rated Critical because it can control all network traffic, potentially blocking security updates or redirecting to malicious sites.
cookies
Permission
High
This permission provides full access to read and modify browser cookies. Rated High because it can steal session tokens, modify authentication cookies, and compromise accounts across websites.
Contextual Risk Factors
Risk Factor
High
The following context increases the overall risk:• 20% increase: Access to sensitive domains increases potential impact
*://kryopage.com/*
Host
Medium
Host permission — access limited to this URL pattern.
https://*.google.com/*
Host
Medium
Host permission — access limited to this URL pattern.
*://*.kryopage.com/*
Host
Medium
Host permission — access limited to this URL pattern.
Access to Sensitive Domains
Risk Factor
Medium
This extension requests access to sensitive domains: https://*.google.com/*

By severity

Critical0
High2
Medium1
Low2

Versions scanned

Showing 1 of 2 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension VersionCode Review Findings
1.25

Files with findings

2 distinct paths — top paths by unique finding count:

  • background.js3
  • main.20ffcd0a.js2
S.No.
Category
Severity
File
Summary
Found in Version
1Tracking
high
background.js (line 13)On install, the background service worker reads all cookies for kryopage.com and exfiltrates affiliate tracking identifiers (sub1, sub2, sub3, clkid, tsp) to an external attribution endpoint at trk.kryopage.com. This …
1.2
2Tracking
high
main.20ffcd0a.js (line 4262)The new-tab override hijacks all user search queries through search.kryopage.com with a hard-coded affiliate ID ('e75d92ea6...'), regardless of the user-chosen engine icon (Google/Bing/etc.) shown in the UI. This is s…
1.2
3Tracking
medium
background.js (line 44)The extension plants a 7-day first-install marker cookie on the kryopage.com domain with secure:false, allowing the marker to be transmitted over unencrypted HTTP and readable by the server-side ad/affiliate stack. Co…
1.2
4Tracking
low
background.js (line 1)Sets an uninstall URL that opens kryopage.com/uninstall when the user removes the extension, a known pattern used by monetized/adware extensions to measure churn and re-target users with retention offers after removal.
1.2
5Tracking
low
main.20ffcd0a.js (line 6828)Centralized API client wired to api.kryopage.com for all extension-originated requests. Not malicious by itself, but it is the vehicle through which newtab-page events/search interactions are reported back to the oper…
1.2
URLs
229
IPv4
100
IPv6
0

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

Gain full insight into all external connections.

Upgrade for full visibility.

Sign In
flipper.kryopage.com/rules.jsonhttps://flipper.kryopage.com/rules.json
trk.-https://trk.
www.w3.org/2000/svghttp://www.w3.org/2000/svg
tailwindcss.com-https://tailwindcss.com
github.com/sindresorhus/modern-normalizehttps://github.com/sindresorhus/modern-normalize
stackoverflow.com/q/181348https://stackoverflow.com/q/181348
en.wikipedia.org/wiki/ISO_week_datehttps://en.wikipedia.org/wiki/ISO_week_date#Calculating_a_date_given_the_year.2C_week_number_and_weekday
momentjs.com/guides/http://momentjs.com/guides/#/warnings/define-locale/
github.com/moment/moment/issues/1423https://github.com/moment/moment/issues/1423
momentjs.com/guides/http://momentjs.com/guides/#/warnings/js-date/
Showing 1 to 10 of 230 rows
Rows per page:

Gain full insight into all external connections.

Upgrade for full visibility.

Sign In
2.8.4.9
IPv4
-
1.2.6.5
IPv4
-
3.6.8.9
IPv4
-
2.8.5.9
IPv4
-
1.5.7.7
IPv4
-
1.3.9.7
IPv4
-
1.9.3.6
IPv4
-
2.9.6.9
IPv4
-
1.6.4.4
IPv4
-
1.1.6.3
IPv4
-
3.2.5.9
IPv4
-
2.5.5.8
IPv4
-
1.1.4.3
IPv4
-
1.3.7.5
IPv4
-
1.7.7.8
IPv4
-
1.8.2.6
IPv4
-
1.5.4.4
IPv4
-
2.4.2.9
IPv4
-
4.4.3.2
IPv4
-
1.1.3.2
IPv4
-
3.3.6.6
IPv4
-
9.4.4.8
IPv4
-
1.3.7.8
IPv4
-
2.5.2.4
IPv4
-
1.1.3.5
IPv4
-
1.6.2.4
IPv4
-
1.2.2.6
IPv4
-
1.7.1.4
IPv4
-
1.2.2.7
IPv4
-
1.3.1.7
IPv4
-
3.1.4.1
IPv4
-
1.2.2.3
IPv4
-
1.1.1.1
IPv4
-
1.1.2.2
IPv4
-
4.4.8.8
IPv4
-
1.1.8.8
IPv4
-
2.2.2.1
IPv4
-
5.2.7.4
IPv4
-
4.2.7.3
IPv4
-
1.1.5.3
IPv4
-
1.5.5.4
IPv4
-
2.1.5.1
IPv4
-
7.2.7.1
IPv4
-
2.1.4.2
IPv4
-
6.1.6.1
IPv4
-
1.7.2.2
IPv4
-
3.3.7.6
IPv4
-
43.5.5.8
IPv4
-
1.7.3.9
IPv4
-
2.5.2.6
IPv4
-
1.7.4.8
IPv4
-
2.3.3.5
IPv4
-
1.6.5.7
IPv4
-
1.9.4.5
IPv4
-
1.3.6.6
IPv4
-
1.6.5.4
IPv4
-
1.2.2.1
IPv4
-
1.8.2.2
IPv4
-
5.1.7.1
IPv4
-
2.2.4.2
IPv4
-
3.1.5.1
IPv4
-
1.7.4.2
IPv4
-
1.4.1.6
IPv4
-
2.1.7.7
IPv4
-
1.6.8.1
IPv4
-
1.3.1.4
IPv4
-
3.2.4.3
IPv4
-
2.1.3.2
IPv4
-
5.3.6.4
IPv4
-
1.6.1.1
IPv4
-
2.3.3.4
IPv4
-
4.4.7.9
IPv4
-
1.4.1.2
IPv4
-
3.5.4.8
IPv4
-
51.4.8.1
IPv4
-
1.2.2.5
IPv4
-
2.3.5.6
IPv4
-
4.5.8.9
IPv4
-
81.2.8.3
IPv4
-
7.1.6.1
IPv4
-
1.5.1.7
IPv4
-
4.1.9.3
IPv4
-
1.3.4.5
IPv4
-
1.5.5.3
IPv4
-
4.4.2.7
IPv4
-
1.1.5.2
IPv4
-
2.5.3.7
IPv4
-
2.2.1.1
IPv4
-
2.1.4.3
IPv4
-
5.1.2.1
IPv4
-
3.1.5.2
IPv4
-
4.2.8.3
IPv4
-
1.2.5.5
IPv4
-
1.6.7.1
IPv4
-
1.2.1.3
IPv4
-
1.3.3.7
IPv4
-
3.1.6.1
IPv4
-
1.3.7.7
IPv4
-
2.8.1.5
IPv4
-
5.4.9.9
IPv4
-
Showing 1 to 100 of 100 rows
Rows per page:
Version
Size
Is Malicious
Findings
Permhash
1.2
Latest
2.21 MB
Malicious
5
2f0030c535193fc164e4e2b5371e8e676510cf0a64b2689d9aba6533e6ddea82
1.3
2.24 MB
Malicious
—
937b3c059f7876f4a0e1f0561661c4e625c27d0c870c00af25467dacc1d523ca
Showing 1 to 2 of 10 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files (scanned top 25 shared text files)

No comparable text files found between these versions.

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

Sign In