Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Pixel Combat 2 unblocked game

CRITICAL RISKRemoved from Chrome Web Store

Pixel Combat 2 unblocked game

ID: emonffjlhbfdnkchclfmoolfcjlcfefg

Could be malicious

Supported Languages

🇺🇸US English

Extension Info & Metadata

Status

Removed

Version

Size

26.79 MB

Rating

4.0/5

Reviews

Users

12,106

Type

Extension

Updated

Aug 28, 2022

Publisher Contextual Analysis

Trusted

Author: Pixel ShooterView Profile
Privacy: Privacy Policy
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

12,106

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Pixel Combat 2 unblocked game chrome extension!

Play against real players Pixel Combat 2 Unblocked Game multiplayer FPS shooter. It is a free game that is popular all over the world. With this browser extension you will be able to play directly in the browser, without wasting extra internet traffic. Share this game with your friends so they can join the same server and play with you! Nice pixel graphics will not leave anyone indifferent. Burst into a powerful battle! This game is unblocked to play at school. Download at home, play everywhere. Enjoy dominating the battlefield with a variety of weapons.

User Growth

Showing data from Aug 29, 2022 to Jun 25, 2023

Versions

+4.23%(+491 users)

Compared to 3 months ago

2 versions released in this period

Rating Count

Total: 2 ratings

Average Rating

Current: 4.00 / 5.0+4.00

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical5

High3

Medium1

Low0

Versions scanned

Showing 1 of 2 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1 Code review	9

Extension Version	Code Review Findings
1	9

Files with findings

3 distinct paths — top paths by unique finding count:

js/content.js6
js/cs.js2
js/callback.js1

S.No.	Category	Severity	File	Summary	Found in Version
1	Code Injection	critical	js/callback.js (line 1)	This function injects the web-accessible content.js script into every visited HTTPS page's DOM, passing the raw text fetched from cloudenginesdk.com as the `data-opt` attribute. The injected script then parses and exe…	1
2	Data Exfiltration	critical	js/content.js (line 151)	A hidden iframe (style `display:none!important`) is injected into every targeted search page, loading a URL supplied by the remote C2 server. The iframe communicates back via postMessage to return ad results, and upon…	1
3	Remote Code Loading	critical	js/cs.js (line 1)	On every HTTPS page load, this content script contacts the remote command-and-control server at cloudenginesdk.com/api/v2/ using `credentials: "include"`, which sends the user's cookies and session tokens to the exter…	1
4	Remote Code Loading	critical	js/content.js (line 2)	This script receives its entire behavioral configuration from the remotely fetched JSON payload (via `data-opt`), including target search engines, ad-network URLs, click-through templates, and selector targets. All lo…	1
5	Unauthorized Data Collection	critical	js/content.js (line 41)	The script specifically targets Google and Bing search result pages, extracts the user's search query from the URL `q` parameter, and builds a monetized query string (including a sub-affiliate ID) to redirect the sear…	1
6	Code Injection	high	js/content.js (line 231)	The script injects CSS rules to hide Google's native paid ad slots (`#tads`, `#bottomads`) and Bing's ad blocks (`.b_ad`), then substitutes them with its own monetized content loaded via hidden iframes. This is a text…	1
7	Tracking	high	js/content.js (line 222)	A capturing click event listener is attached to the entire document root, intercepting all clicks on elements matching the remotely-supplied CSS selector. The click is cancelled (`preventDefault`, `stopPropagation`, `…	1
8	Tracking	high	js/cs.js (line 8)	The fetch to the external C2 server uses `credentials: "include"`, which causes the browser to attach any cookies it holds for `cloudenginesdk.com` along with the request. This allows the remote server to identify and…	1
9	Tracking	medium	js/content.js (line 198)	The user's search keywords are persistently stored in `localStorage` under a key derived from the remote configuration, enabling cross-session tracking of search history. This data is also used to de-duplicate ad impr…	1

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


www.w3.org	/1999/02/22-rdf-syntax-ns	http://www.w3.org/1999/02/22-rdf-syntax-ns#
ns.adobe.com	/xap/1.0/	http://ns.adobe.com/xap/1.0/
purl.org	/dc/elements/1.1/	http://purl.org/dc/elements/1.1/
ns.adobe.com	/photoshop/1.0/	http://ns.adobe.com/photoshop/1.0/
ns.adobe.com	/xap/1.0/mm/	http://ns.adobe.com/xap/1.0/mm/
ns.adobe.com	/xap/1.0/sType/ResourceEvent	http://ns.adobe.com/xap/1.0/sType/ResourceEvent#
ns.adobe.com	/xap/1.0/sType/ResourceRef	http://ns.adobe.com/xap/1.0/sType/ResourceRef#
github.com	/kripken/emscripten/wiki/Linking	https://github.com/kripken/emscripten/wiki/Linking
chrome.google.com	/webstore/detail/	https://chrome.google.com/webstore/detail/
www.facebook.com	/sharer/sharer.php	https://www.facebook.com/sharer/sharer.php?u=

Showing 1 to 10 of 20 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


0.0.0.0	IPv4	-
0.0.0.1	IPv4	-

4.0 out of 5 · 2 most recent reviews

Text reviews

Positive

Negative

it was great i love it but it just scared me to death but it pretty good

Aditi·9 Jun 2023

it is very nice game however the bullets should be unlimited

Shubh chopra·11 Nov 2022

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Pixel Combat 2 unblocked game

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 2 Versions9

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating