Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Securify Viewpoint Search™

CRITICAL RISKRemoved from Chrome Web Store

Securify Viewpoint Search™

ID: dmakkciciccnjgmfjflpbdfkdnmpfghp

Could be malicious

Supported Languages

🇺🇸US English

Extension Info & Metadata

Status

Removed

Version

1.5.4768

Size

0.05 MB

Rating

4.4/5

Reviews

Users

200,000

Type

Extension

Updated

Aug 9, 2024

Publisher Contextual Analysis

Author: https://mysecurify.comView Profile
Privacy: Privacy Policy
Help: Help Center
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: Yes
Mailbox exists: Yes
Website: Visit

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

910,000

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Switch your default search engine to easily find unbiased news.

"Securify Viewpoint Search" changes the default search to Bing-powered with political bias aware capabilities. Easily explore different perspectives by searching 'left news'⬅ followed by your search term to uncover alternative viewpoints, or search 'right news'➡ followed by your search term to delve into contrasting opinions. Broaden your search horizon with Securify Viewpoint Search🧠! For any questions, feel free to reach out to us at [email protected].

User Growth

Showing data from Jan 17, 2024 to Jan 15, 2025

Versions

+100%(+100,000 users)

Compared to 3 months ago

3 versions released in this period

Rating Count

Total: 43 ratings

Average Rating

Current: 4.37 / 5.0+0.01

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical4

High5

Medium1

Low0

Versions scanned

Showing 1 of 3 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1.5.4314 Code review	10

Extension Version	Code Review Findings
1.5.4314	10

Files with findings

3 distinct paths — top paths by unique finding count:

background.bundle.js8
crashReport.bundle.js1
manifest.json1

S.No.	Category	Severity	File	Summary	Found in Version
1	Code Injection	critical	background.bundle.js (line 1)	The Yt() function is injected into every visited webpage via chrome.scripting.executeScript. It implements a full remote-control DOM framework: w() injects arbitrary server-provided HTML via innerHTML; A() attaches ev…	1.5.4314
2	Phishing	critical	background.bundle.js (line 1)	The extension implements a server-configurable redirect engine: when the net_conf configuration contains entries of type 'red', the Kr() function intercepts matching page navigations and redirects them to server-speci…	1.5.4314
3	Privilege Escalation	critical	background.bundle.js (line 1)	The Dt() function injects the Yt() DOM control agent into arbitrary tabs via chrome.scripting.executeScript, relaying server-specified command parameters as function arguments. The injected agent listens for postMessa…	1.5.4314
4	Unauthorized Data Collection	critical	background.bundle.js (line 1)	Every hit to the ext.withsecurify.com/api/ext/hit endpoint bundles: a persistent user ID (uid), product/partner IDs, browser idle state, current active tab ID, browser language, local time, local timezone, Chrome runt…	1.5.4314
5	Network Interception	high	background.bundle.js (line 1)	Four webRequest listeners intercept all network traffic across all URL types and resource types. The onSendHeaders listener specifically extracts and caches the Referer header for every request, enabling complete trac…	1.5.4314
6	Obfuscation	high	background.bundle.js (line 1)	All outbound HTTP POST payloads are XOR-encrypted with a server-supplied key (d = net_conf.r, defaulting to 255) and then base64-encoded before transmission. The server controls the key via the remote net_conf configu…	1.5.4314
7	Tracking	high	background.bundle.js (line 1)	The extension maintains a cross-domain tracking cookie registry: uid (persistent user identifier), utm_source (attribution tracking), mid (partner/affiliate ID), and prid (product ID). It writes these as permanent coo…	1.5.4314
8	Unauthorized Data Collection	high	background.bundle.js (line 1)	Every significant browser event — tab open/close, idle state changes, extension icon clicks, search queries (including the full keyword and search URL), notification interactions, and context menu clicks — is reported…	1.5.4314
9	Unauthorized Data Collection	high	manifest.json (line 1)	The manifest installs a custom search provider and forces it as the browser default (is_default: true), hijacking all address-bar search queries to search.withsecurify.com. Every search term the user types is sent to …	1.5.4314
10	Tracking	medium	crashReport.bundle.js (line 1)	This content script (injected into ALL pages via manifest content_scripts) uses an Image pixel beacon to exfiltrate the current page's hostname to ext.withsecurify.com/api/ext/crash when the extension service worker b…	1.5.4314

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


yoursecurify.com	-	https://yoursecurify.com
mysecurify.com	-	https://mysecurify.com
ext.yoursecurify.com	-	https://ext.yoursecurify.com
ext.securifythis.com	-	https://ext.securifythis.com
unknow.com	-	http://unknow.com
ext.yoursecurify.com	/src/bg.bundle.js.d5b24d93fdd7d3efabaf.map	https://ext.yoursecurify.com/src/bg.bundle.js.d5b24d93fdd7d3efabaf.map
ext.yoursecurify.com	/src/crashReport.bundle.js.d5b24d93fdd7d3efabaf.map	https://ext.yoursecurify.com/src/crashReport.bundle.js.d5b24d93fdd7d3efabaf.map
clients2.google.com	/service/update2/crx	https://clients2.google.com/service/update2/crx
ext.yoursecurify.com	/api/ext/suggest	https://ext.yoursecurify.com/api/ext/suggest?sfwfn&q={searchTerms}
search.yoursecurify.com	-	https://search.yoursecurify.com/?dwfy&yh&sfwfn&q={searchTerms}

Showing 1 to 10 of 20 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No IP addresses found

4.1 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

Explore new opportunities with us to increase revenue and expand your chrome extension. See how we can help you. Details at: https://extensionbuysell.com We are looking forward to working with you! Best regards,

Madison Francis·20 Sept 2024

amazing

Amir Shehzaad·13 Feb 2024

i love it

Theo Meyer·29 Jan 2024

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Securify Viewpoint Search™

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 3 Versions10

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating