Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: MQuotes

CRITICAL RISKRemoved from Chrome Web Store

MQuotes

ID: ephnlimpgnacbmcejglppfafiokkpnnc

Could be malicious

Supported Languages

🇺🇸US English

Extension Info & Metadata

Status

Removed

Version

0.0.3

Size

0.11 MB

Rating

0.0/5

Reviews

Users

Type

Extension

Updated

Sep 22, 2023

Publisher Contextual Analysis

Author: MQuotesView Profile
Privacy: Privacy Policy
Help: Help Center
MX records exist: No
Domain exists: No
Is disposable: No
Is role-based: Yes
Mailbox exists: No

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Get Motivational Quotes on New Tab.

MQuotes enables user's browser to search the web. It also enables users to increase productivity by add todo list item to new tab. By clicking "Add to Chrome", I accept and agree to installing the "MQuotes" Chrome extension and setting Chrome™ new tab search provider to Microsoft Bing as described by the service in the Terms of Use and Privacy Policy Background images are taken from the best free stock photos, royalty-free images & videos shared by creators on pexels.com. Daily quotes are coming from our own database. Privacy Policy: https://mquotes.online/privacy.php Terms & Conditions: https://mquotes.online/terms.php

User Growth

Showing data from Aug 16, 2023 to Aug 08, 2024

Versions

No change in user count

Compared to 3 months ago

3 versions released in this period

Rating Count

Total: 0 ratings

Average Rating

Current: 0.00 / 5.0

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical0

High2

Medium4

Low0

Versions scanned

Showing 2 of 3 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
0.0.2 Code review	3
0.0.1 Code review	3

Extension Version	Code Review Findings
0.0.2	3
0.0.1	3

Files with findings

3 distinct paths — top paths by unique finding count:

assets/js/bing.js2
assets/js/feed.js2
assets/js/newtab.js2

S.No.	Category	Severity	File	Summary	Found in Version
1	Tracking	high	assets/js/feed.js (line 1)	Every character the user types in the search box is exfiltrated in real time to suggest.findit-all.com, a third-party search monetization network used across browser-hijacker extension families. This domain is not the…	0.0.2
2	Unauthorized Data Collection	high	assets/js/bing.js (line 18)	All search queries are routed through a publisher-controlled tracking endpoint (mquotes.online/trk/t.php) with a persistent per-user SubID parameter (&n=). The extension description claims to 'set Chrome new tab searc…	0.0.2
3	Other	medium	assets/js/newtab.js (line 582)	Commented-out install-time code would have contacted `motivationtab.com` — a domain entirely separate from the declared publisher domain `mquotes.online` — to receive and store a subscriber ID used to tag all future s…	0.0.1
4	Tracking	medium	assets/js/newtab.js (line 143)	The extension persistently stores a per-user subscriber ID in localStorage that is appended to every search query sent to the publisher's tracking endpoint. This SubID is set via the background service worker (to_B_Se…	0.0.2
5	Tracking	medium	assets/js/bing.js (line 18)	All searches are routed through `mquotes.online/trk/t.php` — a tracking redirect on the publisher's server — with the full search query and a per-user `subid` affiliate identifier appended. The CWS listing claims the …	0.0.1
6	Unauthorized Data Collection	medium	assets/js/feed.js (line 1)	Every character the user types in the search box is sent to `suggest.findit-all.com`, an undisclosed third-party service known to be used in browser-hijacking networks. This constitutes unauthorized collection of sear…	0.0.1

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


fonts.googleapis.com	/css2	https://fonts.googleapis.com/css2?family=Open+Sans:wght@400;500;600&family=Playfair+Display:wght@400;500;700&display=swap
www.w3.org	/2000/svg	http://www.w3.org/2000/svg
mquotes.online	/trk/t.php	https://mquotes.online/trk/t.php?
ipinfo.io	/json	https://ipinfo.io/json
api.weatherapi.com	/v1/forecast.json	http://api.weatherapi.com/v1/forecast.json?key=8b9d6a7da10c4db5ad590953231707&q=
mquotes.online	/api.php	https://mquotes.online/api.php
clients2.google.com	/service/update2/crx	https://clients2.google.com/service/update2/crx
mail.google.com	-	https://mail.google.com
www.yahoo.com	-	https://www.yahoo.com/
www.msn.com	-	https://www.msn.com/

Showing 1 to 10 of 20 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No IP addresses found

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

MQuotes

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 3 Versions6

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Growth

Rating Count

Average Rating