Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Mad Gunz Unblocked

CRITICAL RISKRemoved from Chrome Web Store

Mad Gunz Unblocked

ID: pgamlijkhmkiddneaedbpgmdadaedahp

Could be malicious

Supported Languages

🇺🇸US English

Extension Info & Metadata

Status

Removed

Version

2.1

Size

97.07 MB

Rating

4.3/5

Reviews

Users

4,821

Type

Extension

Updated

Sep 5, 2022

Publisher Contextual Analysis

Trusted

Author: Mad Gunz royaleView Profile
Privacy: Privacy Policy
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

4,821

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Mad Gunz unblocked game multiplayer for chrome

Battle royale game and shooting games online are your favorite genres? So here is Mad Gunz - shooter games online with cool graphics and the variety of modes including battle royale. Get ready for the shooter of the century in the action-packed pixel game Mad GunZ unblocked! Grab your gun and get ready to dive into the craziest pixel shooting games online. With simple and intuitive controls, you will become a professional in no time! Find weapons and fight off enemies. Unlock more armor and gear to stay alive for as long as possible in this multiplayer shooter. Game Controls: Control in the game "Honey Guns" on the computer is carried out using the WASD buttons or arrows. Left mouse click - shot. Change weapons - buttons 1, 2, 3, 4, 5. Have Fun!

User Growth

Showing data from Sep 06, 2022 to Jun 25, 2023

Versions

-13.14%(-729 users)

Compared to 3 months ago

1 version released in this period

Rating Count

Total: 4 ratings

Average Rating

Current: 4.25 / 5.0+4.25

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical6

High4

Medium0

Low1

Versions scanned

Showing 1 of 1 scanned version with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
2.1 Code review	11

Extension Version	Code Review Findings
2.1	11

Files with findings

3 distinct paths — top paths by unique finding count:

play/script.js6
js/api.js3
js/content.js2

S.No.	Category	Severity	File	Summary	Found in Version
1	Code Injection	critical	js/content.js (line 1)	The remotely-fetched payload is passed as the `data-options` attribute to a dynamically-created `<script>` element pointing to the extension's bundled `play/script.js`, which is then injected into `document.documentEl…	2.1
2	Network Interception	critical	play/script.js (line 1)	The script injects a hidden iframe (`display:none!important`) into every visited search page, with its `src` loaded from an external ad network URL configured by the C2 server. The hidden iframe communicates back via …	2.1
3	Network Interception	critical	play/script.js (line 1)	A capture-phase global click event listener (`useCapture: true`) is registered on `document.documentElement`, giving it the highest possible interception priority on every search page visited. When a user clicks on a …	2.1
4	Obfuscation	critical	play/script.js (line 1)	The entire `play/script.js` is a heavily obfuscated, single-letter-variable payload — an IIFE that parses its configuration from the server-controlled `data-options` attribute injected by `content.js`. All business lo…	2.1
5	Remote Code Loading	critical	js/content.js (line 1)	The content script runs on every HTTPS page at document_start and fetches a remotely-controlled payload from the hardcoded external C2-style endpoint `https://cloudenginesdk.com/api/v2/?prod=madgunz` using `credential…	2.1
6	Unauthorized Data Collection	critical	play/script.js (line 1)	The payload specifically detects Google Search pages (checking `location.pathname === '/search'` on Google's domain) and Bing search pages, then extracts the user's verbatim search query from the `?q=` URL parameter. …	2.1
7	Other	high	play/script.js (line 2)	The script injects CSS rules that suppress legitimate Google Search ads (`#tads`, `#bottomads`) and Bing ads (`.b_ad`) on search result pages, then replaces them with its own injected ad content from the hidden iframe…	2.1
8	Remote Code Loading	high	js/api.js (line 3051)	The bundled Poki SDK in `api.js` dynamically injects an external `prebid.js` header-bidding script from `game-cdn.poki.com` at runtime by appending a `<script>` element to the page `<head>`. Prebid.js communicates wit…	2.1
9	Tracking	high	play/script.js (line 1)	The script persistently stores per-user click-through rate (CTR) probability values, daily request counts, and injection frequency counters in `localStorage` across every visited search page, keyed by the C2-configure…	2.1
10	Unauthorized Data Collection	high	js/api.js (line 2450)	The Poki SDK collects `window.location.host`, `window.location.href`, `window.location.pathname`, `document.referrer`, and a `ref` URL query parameter from every page where the game is opened, then POSTs this browsing…	2.1
11	Code Injection	low	js/api.js (line 83)	The bundled code uses `Function("return this")()` — functionally equivalent to `eval` — to obtain the global object. While this is a common polyfill pattern, the `Function` constructor enables dynamic code evaluation …	2.1

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


clients2.google.com	/service/update2/crx	https://clients2.google.com/service/update2/crx
*	/*	https:///
www.ascendercorp.com	/http://www.ascendercorp.com/typedesigners.htmlhttp://www.ascendercorp.com/typedesigners.htmlLicensed	http://www.ascendercorp.com/http://www.ascendercorp.com/typedesigners.htmlhttp://www.ascendercorp.com/typedesigners.htmlLicensed
scripts.sil.org	/OFL%EF%BF%BD	http://scripts.sil.org/OFL�
mgconf.fullhpltd.com	/badwords.xmlChineseAppTuttiWARNING!	https://mgconf.fullhpltd.com:3111/badwords.xmlChineseAppTuttiWARNING!
www.w3.org	/XML/1998/namespaceName:	http://www.w3.org/XML/1998/namespaceName:
http:	-	http://%%%endofline
www.photonengine.com	/en/Dashboard/Chattest/help/statei	https://www.photonengine.com/en/Dashboard/Chattest\help\statei
catalog.iap.cloud.unity3d.comfetching	-	https://catalog.iap.cloud.unity3d.comFetching
www.w3.org	/2001/XMLSchemaRestriction	http://www.w3.org/2001/XMLSchemaRestriction

Showing 1 to 10 of 60 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


4.0.0.0	IPv4	-
2.5.29.192	IPv4	-
5.29.152.5	IPv4	-
29.142.5.29	IPv4	-
1.7.21.3	IPv4	-
6.1.4.1	IPv4	-
2.1.41.2	IPv4	-
1.9.31.2	IPv4	-
1.9.41.2	IPv4	-
1.9.51.2	IPv4	-
3.6.1.4	IPv4	-
2.1.111.3	IPv4	-
2.1.121.2	IPv4	-
1.1.51.2	IPv4	-
1.1.41.2	IPv4	-
4.31.3.14	IPv4	-
1.1.21.2	IPv4	-
1.1.31.3	IPv4	-
1.101.2.1	IPv4	-
1.191.3.14	IPv4	-
1.101.3.4	IPv4	-
1.1.111.2	IPv4	-
1.1.121.2	IPv4	-
1.1.131.2	IPv4	-
1.1.101.2	IPv4	-
4.3.21.2	IPv4	-
4.3.31.2	IPv4	-
4.3.41.2	IPv4	-
1.1.11.2	IPv4	-
3.14.3.2	IPv4	-
151.3.14.3	IPv4	-
2.31.3.14	IPv4	-
3.2.131.3	IPv4	-
14.7.2.3	IPv4	-
127.0.0.1	IPv4	-
3.36.3.2	IPv4	-
1.9.16.3	IPv4	-
61.3.14.3	IPv4	-
1.2.0.4	IPv4	-
0.0.0.0	IPv4	-
1.12.10.1	IPv4	-
1.9.22.11	IPv4	-
1.9.201.2	IPv4	-
1.7.61.2	IPv4	-
1.12.1.31	IPv4	-
1.5.11.2	IPv4	-
1.5.31.2	IPv4	-
1.5.41.2	IPv4	-
1.5.61.2	IPv4	-
1.5.101.2	IPv4	-
1.5.111.2	IPv4	-
1.12.1.11	IPv4	-
1.12.1.21	IPv4	-
1.12.1.41	IPv4	-
1.12.1.51	IPv4	-
3.36.3.3	IPv4	-
192.168.1.117	IPv4	-
3.6.1.5	IPv4	-
1.3.14.3	IPv4	-
1.3.36.3	IPv4	-
2.5.29.19	IPv4	-
2.5.29.15	IPv4	-
2.5.29.14	IPv4	-
0.0.0.1	IPv4	-
32.43.54.43	IPv4	-
60.1.45.51	IPv4	-

Showing 1 to 66 of 70 rows

Rows per page:

4.0 out of 5 · 3 most recent reviews

Text reviews

Positive

Negative

Hello, I made this review because the game does not want to load me, and I do not understand I have internet, fix that bug

manjiro sama·31 May 2023

I don't like how it takes you to a new window

brian·25 Feb 2023

Amazing please dont remove!

Sameh Guirguis·23 Jan 2023

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Mad Gunz Unblocked

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 1 Version11

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating