Security Alert: Confirmed Malware
OpenLoop.SO Sentry Node Extension
ID: effapmdildnpkiaeghlkicpfflpiambm
Supported Languages
Extension Info & Metadata
Publisher Contextual Analysis
- Privacy
- Privacy Policy
- MX records exist
- No
- Domain exists
- Yes
- Is disposable
- No
- Is role-based
- Yes
- Mailbox exists
- No
Contribute to the OpenLoop, earning while bolstering the decentralized infrastructure for large-scale data collection.
OpenLoop Sentry Node Extension is your gateway to actively participate in the revolutionary OpenLoop Network. By leveraging the power of decentralized infrastructure, this extension empowers users to optimize their internet bandwidth, contribute to AI development, and earn rewards seamlessly. *** What is OpenLoop Network? OpenLoop Network is a decentralized wireless network designed to enhance the delivery of internet services while empowering users. Built on cutting-edge technology, OpenLoop combines innovative protocols, decentralized systems, and user participation to create a robust framework for the future of internet connectivity and AI infrastructure. The network operates on a foundation of trustless mechanisms, such as proof of backhaul, location, and frequency, ensuring data security, transparency, and reliability. By decentralizing internet bandwidth, OpenLoop builds a scalable infrastructure tailored to meet the data needs of leading AI companies. *** How Does the Sentry Node Extension Work? The OpenLoop.Network Sentry Node Extension allows users to connect their devices to the OpenLoop ecosystem. Once installed, property owners and residents can share unused internet bandwidth with the network, contributing to its growth and receiving rewards in return. This user-friendly extension operates in the background, ensuring a seamless and secure experience without compromising your internet quality or personal data. *** Key Features of OpenLoop.Network Sentry Node Extension - Enhanced Internet Service Delivery: Sync3 Network, the foundation of OpenLoop, enhances internet performance by creating a decentralized wireless infrastructure. This allows users to improve their connectivity while contributing to the network. - Earn Rewards Effortlessly: Through OpenLoop's innovative protocol and hardware, users can monetize their unused internet bandwidth. Property owners and residents alike can share bandwidth with the network to earn rewards, transforming internet usage into a source of income. - Decentralized Security & Trust: OpenLoop Network leverages decentralized frameworks, including proof of backhaul, location, and frequency. These mechanisms ensure a secure, trustless system that protects user contributions while fostering transparency and reliability. - Empowering AI Development: OpenLoop builds the backbone for AI infrastructure, offering a robust, decentralized system that supports the vast data requirements of major AI partners. By contributing to the network, users play a pivotal role in shaping the future of artificial intelligence. *** Why Choose OpenLoop.Network Sentry Node Extension? - User-Friendly Design: Install the extension in just a few clicks and let it handle the rest. Easily monitor your rewards and customize preferences for a personalized experience. - Transparent & Secure: OpenLoop ensures that your personal data remains private. The system only utilizes unused bandwidth and operates transparently, prioritizing user trust. - Community-Centric: Join a growing network of contributors helping to build a decentralized, future-proof internet ecosystem while earning rewards for their participation. - Join the OpenLoop Revolution The OpenLoop.Network Sentry Node Extension isn't just an extension—it’s a movement towards a decentralized future. Be a part of the transformation where internet connectivity, security, and AI innovation converge. Install the extension today and start earning rewards as you help shape the future of decentralized networks and artificial intelligence. Download now and unlock the potential of your internet bandwidth. It’s time to earn, contribute, and connect like never before.
The `shareBandwidth()` function (mapped to `i`) makes an authenticated POST to `/bandwidth/share` at `api.openloop.so`, submitting a `quality` metric. This is the core mechanism by which the user's browser is enrolled as an active node in OpenLoop's residential proxy/bandwidth-harvesting network — monetizing the user's internet connection without granular, informed per-session consent.
async function i() { const r = await ne("/bandwidth/share", { method: "POST", body: JSON.stringify({ quality: t.value || 65 }) }); r != null && r.data && (o.value = { ...o.value, ...r.data.balances })}Upon authentication, `shareBandwidth()` is triggered immediately via a watcher (`immediate:true`) and then placed on a recurring `setInterval` of 180,000 ms (every 3 minutes). This means the extension continuously beacons the user's node status to OpenLoop's servers for as long as the popup is open, with no mechanism for the user to pause or opt out per session. It also fires one final share on component unmount (`$n`).
Y(() => { var s; return (s = n.value) == null ? void 0 : s.username}, s => { s && t.shareBandwidth()}, { immediate: !0}), Y(Ve, s => { s && t.getMyProfile()}, { immediate: !0});const o = P();return Fe(() => { o.value && clearInterval(o.value), o.value = setInterval(() => { t.shareBandwidth() }, 18e4)}), $n(async () => { o.value && (await t.shareBandwidth(), clearInterval(o.value))})The extension defines a centralized API wrapper `ne()` that sends all requests to `https://api.openloop.so` with a JWT bearer token, enabling the backend to authenticate and track this specific user's node. A storage key suspiciously named `FAKE_STORAGE` (`openloopFs`) is initialized alongside the real token storage — the deceptive naming suggests an intent to obscure or mislead analysis tools about the extension's actual storage usage.
const gt = { ACCESS_TOKEN: "openloopjwt", FAKE_STORAGE: "openloopFs", IS_VISITED_WELCOME_PAGE: "openloopIsVisitedWelcomePage" }, Ve = ht(gt.ACCESS_TOKEN, ""), Rt = ht(gt.IS_VISITED_WELCOME_PAGE, "");ht(gt.FAKE_STORAGE, "");async function ne(e, t = {}) { try { const o = `https://api.openloop.so${e}`, s = { ...t, headers: { ...t.headers, Authorization: `Bearer ${Ve.value}` } }; return await (await fetch(o, s)).json() } catch (n) { console.error(`fetch error: ${n}`) }}The extension measures internet speed by loading an image from `cdn.sync3.network` with a cache-busting timestamp parameter (`?nnn=<epoch>`). Each call reveals the user's IP address and precise request timestamp to this third-party CDN domain, enabling user fingerprinting and tracking across sessions independent of OpenLoop's main API. The `sync3.network` domain is not disclosed to users, is separate from `openloop.so`, and the cache-busting ensures a new HTTP request (with full headers) is made each time quality is measured.
const fo = "https://cdn.sync3.network/logo-4867.jpeg", po = 4867;function s() { const a = new Date().getTime(), u = `?nnn=${a}`, l = new Image; l.src = fo + u, l.onload = function() { const f = (new Date().getTime() - a) / 1e3, r = (po * 8 / f).toFixed(2), d = n(Number(r)); o.value = d, t.internetQuality = d < 60 ? d + Kn(10, 15) : d }}The manifest explicitly describes the extension's purpose as enabling 'large-scale data collection' through the user's device. This constitutes an admission in metadata that the extension harvests user bandwidth/resources for a commercial data collection network. Combined with the extension being unlisted and having 400,000+ users, this is a clear indicator the extension operates as a residential proxy node that routes third-party traffic through users' internet connections.
{ "description": "Contribute to the OpenLoop Network, earning while bolstering the decentralized infrastructure for large-scale data collection."}When the measured connection quality score is below 60, a random integer between 10 and 15 is added to the score before it is reported to the server via `/bandwidth/share`. This artificially inflates low-quality node metrics sent to OpenLoop's infrastructure — effectively deceiving OpenLoop's backend about node reliability, or alternatively deceiving users by showing them an inflated quality score in the UI while submitting the same inflated value to the API.
function Kn(e, t) { return Math.floor(Math.random() * (t - e + 1)) + e}// ...usage:t.internetQuality = d < 60 ? d + Kn(10, 15) : dBy severity
Versions scanned
Showing 2 of 10 scanned versions with more than one unique finding. Counts are unique findings that include each version.
| Extension Version | Code Review Findings |
|---|---|
| 0.0.3 | 3 |
| 0.0.2 | 6 |
Files with findings
4 distinct paths — top paths by unique finding count:
- dist/assets/popup-DcSPjCQf.js5
- dist/background/index.mjs2
- dist/assets/popup-BCWzmMNw.js1
- manifest.json1
URLs
View the external URLs this extension communicates with to understand its network activity and data interactions.
Gain full insight into all external connections.
Upgrade for full visibility.
Gain full insight into all external connections.
Upgrade for full visibility.
Code Diff
Compare extension code between any two versions.
No comparable text files found between these versions.
Browse and explore files within this extension package
Gain full insight into all external connections.
Upgrade for full visibility.