Chrome Web StoreCaution required
Suspicious in code review (v3.3.1)
Our reviewer found behaviour consistent with malware in version 3.3.1, but not enough to confirm it. Treat this extension as untrusted until it has been re-reviewed.
76 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
What our analysis found
Olympiacos FC, used by 1,823 people, is rated caution by Extension Auditor. Our code review reported 4 findings (2 medium, 2 low), led by tracking. It comes from a trusted publisher and was last updated in June 2026.
Key findings
- Medium
Tracking
On first install the extension reads an 'extensionHash' cookie from the background page context and immediately POSTs it — along with a score value — to [domain withheld]. This is an tracking call that ties the installation to a marketing channel hash. No such data collection is disclosed in the CWS listing (declared: none), and the destination domain is a third-party search-monetisation provider unrelated to [domain withheld] or [domain withheld].
- Medium
Tracking
Every new-tab open, search submission (with the raw query in 'val'), and UI click event (news, bookmark, history, favourite) is dispatched as a telemetry beacon to [domain withheld], a SearchTurbo analytics endpoint. The payload includes the event type, the search query where applicable, the extension rtag 'olymp', and elapsed-time-since-install. This is systematic behavioural tracking of undisclosed scope sent to a third-party domain; the CWS listing declares zero data collection.
- Low
Tracking
The extension registers a chrome.runtime.setUninstallURL pointing to [domain withheld] with 't=uninstall' and elapsed-time parameters. This ensures a tracking ping fires through the browser when any user removes the extension, adding to the undisclosed behavioural profile maintained by the SearchTurbo backend.
- Low
Tracking
The news panel unconditionally fetches push-monetisation ad inventory from Jeeng's Azure backend with hardcoded publisher credentials (domain_id, user_id). These calls are made without user consent and represent a second third-party integration not disclosed in the CWS listing. While Jeeng is a legitimate ad network, its integration here is undisclosed and the hardcoded user_id acts as a persistent publisher identifier shared across all installs of this template.
Analyst notes
The extension is a brandTURBO 'new tab override' template built around the Olympiacos FC brand. The code contains no credential theft, page injection, or network interception, but it systematically routes all user searches through SearchTurbo's monetised network ([domain withheld]) and fires undisclosed behavioural analytics beacons — including the raw search query — to that same third-party domain on every tab open, search, and click event. At install time, reads an 'extensionHash' referral cookie and POSTs a score payload to [domain withheld] without user notice. CWS-disclosed data collection is 'none', making all of this undisclosed. The ML score is partially a false-positive inflated by bundler patterns, but the publisher-reputation signal (56 % of 98 extensions flagged malicious) and the permhash cluster (65 % of 576 peers flagged malicious) both independently corroborate that this template family is classified as by the industry; the extension has also been removed from the store.
Olympiacos FC Chrome extension security report
ID: lfhfngocbldniigbbhbjlbhcdolfalof
Supported Languages
Extension Info & Metadata
Publisher Contextual Analysis
- Author
- brandTURBO
- Privacy
- Privacy Policy
- Help
- Help Center
- Country
- DE
- MX records exist
- Yes
- Domain exists
- Yes
- Is disposable
- No
- Is role-based
- Yes
- Mailbox exists
- Yes
- Address
- Straßburger Str. 55 Berlin 10405 DE
- Website
- Visit
Screenshots & videos
Install growth
76 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
About this extension
The Official Olympiacos FC Chrome new tab is here! Get the latest news, videos and exclusive materials live in your browser!
Read the publisher’s full description
You can… paint your browser red-and-white! The official Olympiacos FC extension brings directly to your screen everything you want to know about your favorite team. All the latest news of the Legend, videos, exclusive materials, wallpapers and many more surprises are waiting for you on your screen! Download the official Olympiacos FC Chrome extension in Chrome and Edge on Windows and MacOS now!
User reviews
Extension files
Browse and explore files within this extension package
Gain full insight into all external connections.
Upgrade for full visibility.
URLs
View the external URLs this extension communicates with to understand its network activity and data interactions.
76 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
Code Diff
Compare extension code between any two versions.
0 changed files detected
No comparable text files found between these versions.
Gain full insight into all external connections.
Upgrade for full visibility.