Security Alert: Confirmed Malware
Splishy Fish Game
ID: dmbjjfkeoealdcdmfcodhapahhgofego
Supported Languages
Extension Info & Metadata
Publisher Contextual Analysis
- Author
- feepgamesView Profile
- Privacy
- Privacy Policy
- MX records exist
- Yes
- Domain exists
- Yes
- Is disposable
- No
- Is role-based
- No
- Mailbox exists
- Yes
Splishy Fish is so hungry! Help him gobble his fish food as he travels through the aquarium.
Splishy Fish Game Description Splishy Fish is so hungry! Help him gobble his fish food as he travels through the aquarium. But watch out for the rocks, they’ll stop him in his tracks! Splishy Fish Game Instructions Tap or click to play. Tap Splishy Fish to start. Continuously tap the fish to keep him from falling. Adjust your tapping speed to guide Splishy Fish through the aquarium to gobble up fish food to earn points. Don’t let him fall OR hit the rocks! Good luck! If you want to play more different games, just click the More Games button in the pupup menu.
This extension requests no permissions and has no recorded risk factors.
On first install, the service worker silently opens a tab to a third-party domain (minecraft-2.site) operated by the same publisher. This is a traffic-monetization technique used by PUP-class extensions; while not malicious on its own, it is unsolicited navigation on behalf of the user and is particularly notable because the publisher's other extensions are all classified as malicious.
var ExtUpdateConf = { installUrl: "https://www.minecraft-2.site/splishy-fisch/", uninstallUrl: "https://www.minecraft-2.site/"};onInstalled(details) { if (ExtUpdateConf.installUrl && details.reason == "install") { chrome.tabs.create({ url: ExtUpdateConf.installUrl, }); }}The popup UI contains a prominent 'More Games' button linking to minecraft-2.site. Combined with the install-time redirect, this establishes the extension as a traffic-funnel for the publisher's domain. No data is exfiltrated and no code is injected, but it reinforces the PUP pattern.
<a class="btn btn-info" type="submit" href="https://www.minecraft-2.site" target="_blank" style="margin-top: 15px; width: 260px; height: 42px;"> <img src="video-console.png"> More Games </a>By severity
Versions scanned
Showing 1 of 1 scanned version with more than one unique finding. Counts are unique findings that include each version.
| Extension Version | Code Review Findings |
|---|---|
| 1.3.9 | 2 |
Files with findings
2 distinct paths — top paths by unique finding count:
- NOFgP.html1
- RJgVgLj.js1
URLs
View the external URLs this extension communicates with to understand its network activity and data interactions.
Gain full insight into all external connections.
Upgrade for full visibility.
Gain full insight into all external connections.
Upgrade for full visibility.
Browse and explore files within this extension package
Gain full insight into all external connections.
Upgrade for full visibility.