Chrome Web StoreCaution required
Suspicious in code review (v1.1)
Our reviewer found behaviour consistent with malware in version 1.1, but not enough to confirm it. Treat this extension as untrusted until it has been re-reviewed.
133 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
What our analysis found
Rainbow Six | DE | Ranked is rated caution by Extension Auditor. Our code review reported 2 findings (2 high), led by other. It comes from a trusted publisher and was last updated in April 2023.
Key findings
- High
Other
The extension silently rewrites every Amazon product link on the page to inject affiliate tag 'r6de-21', and immediately redirects the current page visit through the affiliate URL if it matches a product pattern. This earns the publisher commission on every user purchase without the user's knowledge or consent — the CWS listing describes the extension as a rank-display tool with no mention of affiliate behaviour. This is unauthorized monetization of the user's browsing activity.
- High
Other
The bundled manifest is named 'Rainbow Six | DE | Affiliate' and describes Amazon affiliate link injection, but the CWS listing presents this as 'Rainbow Six | DE | Ranked' — a Discord rank-display utility. Furthermore, the bundled manifest declares zero permissions, while the published manifest summary claims 'identity' and 'storage' permissions. The mismatch is a deliberate misrepresentation to induce installs under false pretenses; the permission mismatch indicates the live CWS version may have capabilities not present in this ZIP.
Analyst notes
The extension's CWS listing claims to display Rainbow Six Discord ranks and link accounts, but the actual bundled code (manifest name: 'Rainbow Six | DE | Affiliate') exclusively performs Amazon affiliate link hijacking — silently replacing all Amazon product links with the publisher's affiliate ID 'r6de-21' and redirecting product page visits through affiliate URLs (:51-68). This is a textbook deceptive-affiliate scheme: users install under a false premise and the publisher monetizes every Amazon purchase without disclosure. The publisher's 100% malicious rate on their other two extensions corroborates malicious intent. The third-party score of contradicts the ML verdict but it does not account for the deceptive listing, only raw permission risk. There is also a clear mismatch between the bundled manifest (zero permissions declared) and the published manifest (claims 'identity' and 'storage'), which is itself a finding.
Rainbow Six | DE | Ranked Chrome extension security report
ID: iodmcahcbobdhpggnobnnnpinpkcgbkm
Supported Languages
Extension Info & Metadata
Publisher Contextual Analysis
- Author
- Rainbow Six | DE
- MX records exist
- Yes
- Domain exists
- Yes
- Is disposable
- No
- Is role-based
- No
- Mailbox exists
- Yes
Screenshots & videos
Install growth
133 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
About this extension
Mit dieser Erweiterung wird automatisch dein Rang auf dem Rainbow Six | DE angezeigt!
Read the publisher’s full description
Mit dieser Erweiterung können Nutzer des "Rainbow Six | DE" Discord Server ihr Ubisoft Konto mit ihrem Discord Konto verknüpfen, um automatisch ihren Rainbow Six Rang auf dem Server zu bekommen. Server Website: https://www.rainbowdiscord.de/
User reviews
Extension files
Browse and explore files within this extension package
Gain full insight into all external connections.
Upgrade for full visibility.
URLs
View the external URLs this extension communicates with to understand its network activity and data interactions.
133 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
Code Diff
Compare extension code between any two versions.
0 changed files detected
No comparable text files found between these versions.
Gain full insight into all external connections.
Upgrade for full visibility.
Related extensions
More from Rainbow Six | DE
- Rainbow6ItaCom | Rank1,362 users
- Rainbow Six Siege Mates | Ranked81 users
Popular in Shopping
- PayPal Honey: Automated Coupons & Rewards13,000,000 users
- Avira Safe Shopping7,000,000 users
- 中国工商银行密码扩展5,656,728 users
- Capital One Shopping: Save Now5,240,703 users
- Keepa - Amazon Price Tracker5,000,000 users