Security Warning: Historically Flagged as Malware
Paint - Easy Drawings
ID: doiiaejbgndnnnomcdhefcbfnbbjfbib
Supported Languages
Extension Info & Metadata
Publisher Contextual Analysis
- Author
- https://paintontab.com/View Profile
- Privacy
- Privacy Policy
- MX records exist
- Yes
- Domain exists
- Yes
- Is disposable
- No
- Is role-based
- No
- Mailbox exists
- Yes
- Website
- Visit
Use the paint extension for easy drawings. This drawings tool allows Illustrate on-screen and capture with the screenshot feature.
Paint is lite weight and a free app that can be used for educational purposes and introduce anyone to drawing right from your browser. Use it to make drawings easy and intuitive right on your screen! Take a screenshot and showcase your creations to friends. Sketch playful drawings or jot down ideas on web pages. Easily illustrate your screen and capture it with a quick screenshot. Paint extension has a simple and easy-to-use design. It is not confusing, and easily recognizable icons are used in the app, which makes it easy for everyone to use. Draw on any website, add text, add lines, and highlight! Use your mouse or touchscreen to draw on the web or PDFs and save it to your computer. It is just a fun extension, and you can get some laughs using this extension by creating funny faces, etc., on web pages.
The review-prompt popup injected at 7 and 21 days post-install displays the message 'We're happy to hear that you love using Paint Online!' and a 'Give Paint Online 5 stars' button, but the embedded URL targets the Chrome Web Store reviews page for a completely different extension (ID: cclhgechkjghfaoebihpklmllnnlnbdb) rather than the installed extension (doiiaejbgndnnnomcdhefcbfnbbjfbib). The same deceptive HTML is duplicated at lines 165โ168. This social engineering tricks users who believe they are rating the extension they installed into actually boosting ratings for an unrelated extension โ a classic coordinated review-inflation spamware pattern confirmed by the socket.dev investigation into this extension family.
document.getElementById("drawpad_rate_us_container_announcement") .innerHTML = '...\n<button class="drawpad_announcement-button drawpad_announcement-redirect">\n <a href="https://chrome.google.com/webstore/detail/paint-on-tab-tool-draw-on/cclhgechkjghfaoebihpklmllnnlnbdb/reviews"\n target="_blank">Give Paint Online 5 stars</a>\n</button>\n<button class="drawpad_announcement-button drawpad_announcement-close">No thanks</button>\n...'By severity
Versions scanned
None of the 4 scanned versions have more than one unique code-review finding. Counts are unique findings that include each version.
| Extension Version | Code Review Findings |
|---|---|
| No versions with multiple unique findings. | |
Files with findings
1 distinct path โ top paths by unique finding count:
- js/inject-announcements.js1
URLs
View the external URLs this extension communicates with to understand its network activity and data interactions.
Gain full insight into all external connections.
Upgrade for full visibility.
Gain full insight into all external connections.
Upgrade for full visibility.
Code Diff
Compare extension code between any two versions.
No comparable text files found between these versions.
Browse and explore files within this extension package
Gain full insight into all external connections.
Upgrade for full visibility.