Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Kryopage

CRITICAL RISKRemoved from Chrome Web Store

Kryopage

ID: idbdehpokikeobjcpgnleaaebmddflhi

Could be malicious

Supported Languages

🇺🇸English

Extension Info & Metadata

Status

Removed

Version

1.2

Size

2.24 MB

Rating

4.6/5

Reviews

Users

40,000

Type

Extension

Updated

Dec 7, 2023

Publisher Contextual Analysis

Trusted

Author: https://kryopage.comView Profile
Privacy: Privacy Policy
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

40,000

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Kryopage Extension

Get Kryopage extension. By clicking "Add to chrome", I accept and agree to installing "Kryopage Extension" extension and setting Chrome™ newtab search to that provided by the service and the Terms of Use and Privacy Policy. search results will be powered by Microsoft Bing. Features: - Beautiful and Elegant: Change your new tab into a minimum and beautiful page. Remove all the distractions and focus on what matters. - Widgets: Get useful widgets such as translation widget, time zone widget and more. Privacy policy: https://kryopage.com/privacy Terms and conditions: https://kryopage.com/terms

User Growth

Showing data from Aug 10, 2023 to Mar 30, 2024

Versions

-1.77%(-722 users)

Compared to 3 months ago

2 versions released in this period

Rating Count

Total: 71 ratings

Average Rating

Current: 4.56 / 5.0+4.56

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical0

High2

Medium1

Low2

Versions scanned

Showing 1 of 2 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1.2 Code review	5

Extension Version	Code Review Findings
1.2	5

Files with findings

2 distinct paths — top paths by unique finding count:

background.js3
main.20ffcd0a.js2

S.No.	Category	Severity	File	Summary	Found in Version
1	Tracking	high	background.js (line 13)	On install, the background service worker reads all cookies for kryopage.com and exfiltrates affiliate tracking identifiers (sub1, sub2, sub3, clkid, tsp) to an external attribution endpoint at trk.kryopage.com. This …	1.2
2	Tracking	high	main.20ffcd0a.js (line 4262)	The new-tab override hijacks all user search queries through search.kryopage.com with a hard-coded affiliate ID ('e75d92ea6...'), regardless of the user-chosen engine icon (Google/Bing/etc.) shown in the UI. This is s…	1.2
3	Tracking	medium	background.js (line 44)	The extension plants a 7-day first-install marker cookie on the kryopage.com domain with secure:false, allowing the marker to be transmitted over unencrypted HTTP and readable by the server-side ad/affiliate stack. Co…	1.2
4	Tracking	low	background.js (line 1)	Sets an uninstall URL that opens kryopage.com/uninstall when the user removes the extension, a known pattern used by monetized/adware extensions to measure churn and re-target users with retention offers after removal.	1.2
5	Tracking	low	main.20ffcd0a.js (line 6828)	Centralized API client wired to api.kryopage.com for all extension-originated requests. Not malicious by itself, but it is the vehicle through which newtab-page events/search interactions are reported back to the oper…	1.2

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

211

IPv4

100

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


momentjs.com	/guides/	http://momentjs.com/guides/#/warnings/define-locale/
momentjs.com	/guides/	http://momentjs.com/guides/#/warnings/js-date/
momentjs.com	/guides/	http://momentjs.com/guides/#/warnings/min-max/
momentjs.com	/guides/	http://momentjs.com/guides/#/warnings/add-inverted-param/
momentjs.com	/guides/	http://momentjs.com/guides/#/warnings/zone/
momentjs.com	/guides/	http://momentjs.com/guides/#/warnings/dst-shifted/
momentjs.com	/timezone/docs/	https://momentjs.com/timezone/docs/#/use-it/browser/
momentjs.com	/timezone/docs/	http://momentjs.com/timezone/docs/#/data-loading/.
www.w3.org	/2000/svg	http://www.w3.org/2000/svg
github.com	/axios/axios.git	https://github.com/axios/axios.git

Showing 1 to 10 of 220 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


2.8.4.9	IPv4	-
1.2.6.5	IPv4	-
3.6.8.9	IPv4	-
2.8.5.9	IPv4	-
1.5.7.7	IPv4	-
1.3.9.7	IPv4	-
1.9.3.6	IPv4	-
2.9.6.9	IPv4	-
1.6.4.4	IPv4	-
1.1.6.3	IPv4	-
3.2.5.9	IPv4	-
2.5.5.8	IPv4	-
1.1.4.3	IPv4	-
1.3.7.5	IPv4	-
1.7.7.8	IPv4	-
1.8.2.6	IPv4	-
1.5.4.4	IPv4	-
2.4.2.9	IPv4	-
4.4.3.2	IPv4	-
1.1.3.2	IPv4	-
3.3.6.6	IPv4	-
9.4.4.8	IPv4	-
1.3.7.8	IPv4	-
2.5.2.4	IPv4	-
1.1.3.5	IPv4	-
1.6.2.4	IPv4	-
1.2.2.6	IPv4	-
1.7.1.4	IPv4	-
1.2.2.7	IPv4	-
1.3.1.7	IPv4	-
3.1.4.1	IPv4	-
1.2.2.3	IPv4	-
1.1.1.1	IPv4	-
1.1.2.2	IPv4	-
4.4.8.8	IPv4	-
1.1.8.8	IPv4	-
2.2.2.1	IPv4	-
5.2.7.4	IPv4	-
4.2.7.3	IPv4	-
1.1.5.3	IPv4	-
1.5.5.4	IPv4	-
2.1.5.1	IPv4	-
7.2.7.1	IPv4	-
2.1.4.2	IPv4	-
6.1.6.1	IPv4	-
1.7.2.2	IPv4	-
3.3.7.6	IPv4	-
43.5.5.8	IPv4	-
1.7.3.9	IPv4	-
2.5.2.6	IPv4	-
1.7.4.8	IPv4	-
2.3.3.5	IPv4	-
1.6.5.7	IPv4	-
1.9.4.5	IPv4	-
1.3.6.6	IPv4	-
1.6.5.4	IPv4	-
1.2.2.1	IPv4	-
1.8.2.2	IPv4	-
5.1.7.1	IPv4	-
2.2.4.2	IPv4	-
3.1.5.1	IPv4	-
1.7.4.2	IPv4	-
1.4.1.6	IPv4	-
2.1.7.7	IPv4	-
1.6.8.1	IPv4	-
1.3.1.4	IPv4	-
3.2.4.3	IPv4	-
2.1.3.2	IPv4	-
5.3.6.4	IPv4	-
1.6.1.1	IPv4	-
2.3.3.4	IPv4	-
4.4.7.9	IPv4	-
1.4.1.2	IPv4	-
3.5.4.8	IPv4	-
51.4.8.1	IPv4	-
1.2.2.5	IPv4	-
2.3.5.6	IPv4	-
4.5.8.9	IPv4	-
81.2.8.3	IPv4	-
7.1.6.1	IPv4	-
1.5.1.7	IPv4	-
4.1.9.3	IPv4	-
1.3.4.5	IPv4	-
1.5.5.3	IPv4	-
4.4.2.7	IPv4	-
1.1.5.2	IPv4	-
2.5.3.7	IPv4	-
2.2.1.1	IPv4	-
2.1.4.3	IPv4	-
5.1.2.1	IPv4	-
3.1.5.2	IPv4	-
4.2.8.3	IPv4	-
1.2.5.5	IPv4	-
1.6.7.1	IPv4	-
1.2.1.3	IPv4	-
1.3.3.7	IPv4	-
3.1.6.1	IPv4	-
1.3.7.7	IPv4	-
2.8.1.5	IPv4	-
5.4.9.9	IPv4	-

Showing 1 to 100 of 100 rows

Rows per page:

4.4 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

very beutiful

Najmul Hasan·22 Feb 2024

very profitable site

Muhammad Yasin·21 Feb 2024

shei

shurid mirza·17 Jan 2024

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Kryopage

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 2 Versions5

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating