Chrome Web StoreCaution required
Suspicious in code review (v1.0.26)
Our reviewer found behaviour consistent with malware in version 1.0.26, but not enough to confirm it. Treat this extension as untrusted until it has been re-reviewed.
What our analysis found
Mizkif Global is rated caution by Extension Auditor. Our code review reported 2 findings (1 high, 1 medium), led by other. It comes from a trusted publisher and was last updated in October 2026.
Key findings
- High
Other
The bundled manifest declares seven host_permissions and content scripts for five social platforms, but the live CWS listing shows only three host_permissions ([domain withheld], [domain withheld], [domain withheld]) and no mention of TikTok, Instagram,, or [domain withheld]. Users reviewing permissions at install time saw a materially different — and significantly narrower — set than what the extension actually uses. Whether this reflects a delayed CWS update or a deliberate omission, the discrepancy means consent to the broader permission set was not clearly obtained.
- Medium
Tracking
The extension builds a persistent device fingerprint from GPU (WebGL UNMASKED_RENDERER), canvas pixel hash, user-agent, CPU cores, device memory, language, and timezone — then transmits it on every authenticated request to [domain withheld] as the X-RGC-Fingerprint header. The code comments confirm this survives reinstalls to track the same physical machine across profiles. The CWS data-collection disclosure is 'none', so this collection of stable device characteristics is not disclosed to users, even though the destination is the publisher's own backend used for anti-fraud review of the rewards system.
Analyst notes
The extension is a legitimate platform for Mizkif's community (Rinaudo Capital) where all network traffic goes exclusively to the publisher's own domains ([domain withheld], [domain withheld]). Two genuine concerns stand: (1) the bundled ZIP manifest declares four additional host_permissions ([domain withheld], [domain withheld], [domain withheld], [domain withheld]) and matching content_scripts absent from the live CWS listing, meaning users who reviewed permissions before installing saw a materially different permission set; (2) constructs a canvas+WebGL+hardware fingerprint and transmits it to the publisher backend on every authenticated request, while the CWS data-collection disclosure is 'none'. The ML score of 0.11, a 98%-clean permhash cluster, and the well-commented source all corroborate that the extension is not malicious, but the undisclosed permission expansion and fingerprinting without disclosure are concrete, code-evidenced concerns that warrant the suspicious rating.
Mizkif Global Chrome extension security report
ID: opnjljhcacpimaeohbbibagnicceeikb
Supported Languages
Extension Info & Metadata
Publisher Contextual Analysis
- Author
- Solutions
- Privacy
- Privacy Policy
- MX records exist
- Yes
- Domain exists
- Yes
- Is disposable
- No
- Is role-based
- No
- Mailbox exists
- Yes
- Website
- Visit
Screenshots & videos
Install growth
No Security Analysis Available
Security analysis has not been performed for this extension version yet.
About this extension
Earn tickets for liking, commenting on, and watching Mizkif's posts and videos, and get pinged when he goes live or posts.
Read the publisher’s full description
Vote on Mizkif's live stock picks from the stream and get pinged the moment a poll opens. For Rinaudo Capital members.
User reviews
Extension files
Browse and explore files within this extension package
Gain full insight into all external connections.
Upgrade for full visibility.
No network indicators were extracted from this version.
Code Diff
Compare extension code between any two versions.
0 changed files detected
No comparable text files found between these versions.
Gain full insight into all external connections.
Upgrade for full visibility.
Related extensions
More from Solutions
- Freeze Facebook Auto-Refresh205 users
- VOD Chat Replay16 users
- Kick Giveaway Manager8 users
- Kick Crates7 users
- Markets Open!2 users
Popular in productivity/communication
- Grammarly: AI Writing Assistant and Grammar Checker App41,000,000 users
- Mailtrack® – Email Tracker for Gmail3,000,000 users
- Seznam Doplněk – Email200,000 users
- Ad Speedup - Skip Video Ads 16X Faster200,000 users
- Adobe Express100,000 users