Is "Yellow Notes for the Cloud" on Chrome Web Store Safe to Install?

[email protected] · chrome · v2.2.2

YellowNotes provides a way to attach small notices to content of the web. Much like Post-it notes did for paper documents, YellowNotes does for web pages. Stick a note on a web page and it is there when you come back later. Highlight a selection of text; attach a note. When you come back, that section will still be highlighted. These notes can also be shared with others. Copy a note and paste a link to it into a email or chat message. If the recipient also has YellowNotes installed, they will see the yellow note in their browser when they use the link. Notes are not limited to just typed text. You can draw in them, or write by hand using you mouse, finger or stylus. A whole web page can be linked into a note: A YellowNote can displayed one web page inside another. The note can be set zoom into a portion of the web page it "carrries" in order to display only a selected part. The notes come with a call-home feature. An icon in the upper-right which when clicked takes to user to the location where the note was attached. To the exact same location of the page. And if the note was attached to a highlighted section of text, that section will also be highlighted. A portable bookmark that takes you to the exact location. You can ask someone about a paragraph by highlighting it, write a remark in the note, paste the note in a chat message to them. They open the note and click to get to the location. They can answer back in the same way. Creating a sharing note in the this way, requires no account with Yellownotes. But you also subscribe to the notes others have created. With sharing on social media we can certainly provide commentary, but it is not clear what we are talking about. Context has been lost. Yellownotes is for placing notes directly in the context where they are relevant and optionally sharing these notes with friends and subscribers. Two people can have a discussion “directly” on a webpage. And the word directly is in quotes here because it does not physically take place on the remote web page, in a form such as a commentary field or similar, but rather just between themselves on the YellowNotes for the Cloud infrastructure. The web page in question is simply the visual background. YellowNotes does not require the webpage to even be accessible. This allows YellowNotes to be used to communicate with site visitors even when the site is off-line. It also allows users to design their own community websites using entirely made-up domain names. The most recent feature of YellowNotes for the Cloud is an AI chatbot where you can use your notes, which really are annotations on the content you see, as a learning source. As the basis for the "smarts" of a bot. You can then chat with yourself. And others, if you allow it, can chat with a virtual representation of you. This currently (Oct-25) in mid-stage development and core features are available to subscribers We call it Augmented Reality for the Web, AR4W The product is currently (Feb.26) in beta testing.

Risk Assessment

Analyzed
100
out of 100
CRITICAL

657 security findings detected across all analyzers

Chrome extension requesting 12 permissions

Severity Breakdown

0
Critical
0
High
394
Medium
263
Low
0
Info

Finding Categories

38
Network
347
IoC Indicators

YARA Rules Matched

12 rules(263 hits)
postinstall file manipulation postinstall file download postinstall network communication postinstall system command postinstall obfuscation LocalStorageShouldNotBeUsed postinstall environment access NoUseWeakRandom postinstall crypto operations postinstall persistence mechanism AlertStatementsShouldNotBeUsed UntrustedContentShouldNotBeIncluded

Requested Permissions

12 permissions
cookies

Read and modify cookies on all sites

High
webRequest

Intercept, modify, and block all network requests

High
activeTab
Medium
tabs
Medium
alarms
Low
contextMenus
Low
scripting
Low
storage
Low
unlimitedStorage
Low
webNavigation
Low
*://www.yellownotes.cloud/*
Low
clipboardWrite
Low

About This Extension

YellowNotes provides a way to attach small notices to content of the web. Much like Post-it notes did for paper documents, YellowNotes does for web pages. Stick a note on a web page and it is there when you come back later. Highlight a selection of text; attach a note. When you come back, that section will still be highlighted. These notes can also be shared with others. Copy a note and paste a link to it into a email or chat message. If the recipient also has YellowNotes installed, they will see the yellow note in their browser when they use the link. Notes are not limited to just typed text. You can draw in them, or write by hand using you mouse, finger or stylus. A whole web page can be linked into a note: A YellowNote can displayed one web page inside another. The note can be set zoom into a portion of the web page it "carrries" in order to display only a selected part. The notes come with a call-home feature. An icon in the upper-right which when clicked takes to user to the location where the note was attached. To the exact same location of the page. And if the note was attached to a highlighted section of text, that section will also be highlighted. A portable bookmark that takes you to the exact location. You can ask someone about a paragraph by highlighting it, write a remark in the note, paste the note in a chat message to them. They open the note and click to get to the location. They can answer back in the same way. Creating a sharing note in the this way, requires no account with Yellownotes. But you also subscribe to the notes others have created. With sharing on social media we can certainly provide commentary, but it is not clear what we are talking about. Context has been lost. Yellownotes is for placing notes directly in the context where they are relevant and optionally sharing these notes with friends and subscribers. Two people can have a discussion “directly” on a webpage. And the word directly is in quotes here because it does not physically take place on the remote web page, in a form such as a commentary field or similar, but rather just between themselves on the YellowNotes for the Cloud infrastructure. The web page in question is simply the visual background. YellowNotes does not require the webpage to even be accessible. This allows YellowNotes to be used to communicate with site visitors even when the site is off-line. It also allows users to design their own community websites using entirely made-up domain names. The most recent feature of YellowNotes for the Cloud is an AI chatbot where you can use your notes, which really are annotations on the content you see, as a learning source. As the basis for the "smarts" of a bot. You can then chat with yourself. And others, if you allow it, can chat with a virtual representation of you. This currently (Oct-25) in mid-stage development and core features are available to subscribers We call it Augmented Reality for the Web, AR4W The product is currently (Feb.26) in beta testing.

Detailed Findings

302 total

YARA Rule Matches

12 rules

Indicators of Compromise

Network indicators, suspicious strings, and potential IoCs extracted during analysis

URLs
54
IP Addresses
45
Domains
255
Strings
347

All Indicators · 347

Domain
detected Domain: e.bb

XIOC detected Domain: e.bb

extracted_from_files

IP
detected IP: 6.0.7.2

XIOC detected IP: 6.0.7.2

extracted_from_files

IP
detected IP: 6.0.2.2

XIOC detected IP: 6.0.2.2

extracted_from_files

IP
detected IP: 5.0.7.2

XIOC detected IP: 5.0.7.2

extracted_from_files

IP
detected IP: ::d

XIOC detected IP: ::d

extracted_from_files

IP
detected IP: 9::

XIOC detected IP: 9::

extracted_from_files

IP
detected IP: 4::

XIOC detected IP: 4::

extracted_from_files

IP
detected IP: ::af

XIOC detected IP: ::af

extracted_from_files

IP
detected IP: ::bef

XIOC detected IP: ::bef

extracted_from_files

IP
detected IP: 3.1.1.1

XIOC detected IP: 3.1.1.1

extracted_from_files

IP
detected IP: 9.0.8.2

XIOC detected IP: 9.0.8.2

extracted_from_files

IP
detected IP: 9.0.2.2

XIOC detected IP: 9.0.2.2

extracted_from_files

IP
detected IP: ::c

XIOC detected IP: ::c

extracted_from_files

IP
detected IP: 1::

XIOC detected IP: 1::

extracted_from_files

IP
detected IP: b4::f

XIOC detected IP: b4::f

extracted_from_files

IP
detected IP: 7::

XIOC detected IP: 7::

extracted_from_files

IP
detected IP: 5::

XIOC detected IP: 5::

extracted_from_files

IP
detected IP: eee0::

XIOC detected IP: eee0::

extracted_from_files

IP
detected IP: d::f

XIOC detected IP: d::f

extracted_from_files

IP
detected IP: 2::

XIOC detected IP: 2::

extracted_from_files

IP
detected IP: d::8

XIOC detected IP: d::8

extracted_from_files

IP
detected IP: 6::

XIOC detected IP: 6::

extracted_from_files

IP
detected IP: f::

XIOC detected IP: f::

extracted_from_files

IP
detected IP: 0::

XIOC detected IP: 0::

extracted_from_files

IP
detected IP: ::cbb

XIOC detected IP: ::cbb

extracted_from_files

IP
detected IP: 44::

XIOC detected IP: 44::

extracted_from_files

IP
detected IP: ::066

XIOC detected IP: ::066

extracted_from_files

IP
detected IP: 8::

XIOC detected IP: 8::

extracted_from_files

IP
detected IP: d::

XIOC detected IP: d::

extracted_from_files

IP
detected IP: 6::a

XIOC detected IP: 6::a

extracted_from_files

IP
detected IP: 7::b

XIOC detected IP: 7::b

extracted_from_files

IP
detected IP: ::a

XIOC detected IP: ::a

extracted_from_files

IP
detected IP: 19::

XIOC detected IP: 19::

extracted_from_files

Domain
detected Domain: www.yellownotes.cloud

XIOC detected Domain: www.yellownotes.cloud

extracted_from_files

Domain
detected Domain: developer.chrome.com

XIOC detected Domain: developer.chrome.com

extracted_from_files

IP
detected IP: 93.184.216.34

XIOC detected IP: 93.184.216.34

extracted_from_files

IP
detected IP: 1.0.6.1

XIOC detected IP: 1.0.6.1

extracted_from_files

IP
detected IP: 1.0.6.0

XIOC detected IP: 1.0.6.0

extracted_from_files

IP
detected IP: ::b

XIOC detected IP: ::b

extracted_from_files

IP
detected IP: b::

XIOC detected IP: b::

extracted_from_files

Domain
detected Domain: message.tab

XIOC detected Domain: message.tab

extracted_from_files

Domain
detected Domain: sender.tab.id

XIOC detected Domain: sender.tab.id

extracted_from_files

Domain
detected Domain: tab.id

XIOC detected Domain: tab.id

extracted_from_files

IP
detected IP: 9.0.4.1

XIOC detected IP: 9.0.4.1

extracted_from_files

IP
detected IP: 9.0.2.1

XIOC detected IP: 9.0.2.1

extracted_from_files

Domain
detected Domain: www.webtoolkit.info

XIOC detected Domain: www.webtoolkit.info

extracted_from_files

Domain
detected Domain: newtab.id

XIOC detected Domain: newtab.id

extracted_from_files

Domain
detected Domain: existingtabs.map

XIOC detected Domain: existingtabs.map

extracted_from_files

Domain
detected Domain: initialdata.map

XIOC detected Domain: initialdata.map

extracted_from_files

Domain
detected Domain: curr.id

XIOC detected Domain: curr.id

extracted_from_files

Domain
detected Domain: sender.tab

XIOC detected Domain: sender.tab

extracted_from_files

Domain
detected Domain: matchingtab.id

XIOC detected Domain: matchingtab.id

extracted_from_files

Domain
detected Domain: message.name

XIOC detected Domain: message.name

extracted_from_files

Domain
detected Domain: replace.new

XIOC detected Domain: replace.new

extracted_from_files

Domain
detected Domain: cookie.name

XIOC detected Domain: cookie.name

extracted_from_files

Domain
detected Domain: cookies.map

XIOC detected Domain: cookies.map

extracted_from_files

Domain
detected Domain: tabs.map

XIOC detected Domain: tabs.map

extracted_from_files

Domain
detected Domain: array.prototype.map.call

XIOC detected Domain: array.prototype.map.call

extracted_from_files

Domain
detected Domain: activetab.id

XIOC detected Domain: activetab.id

extracted_from_files

Domain
detected Domain: chrome.storage

XIOC detected Domain: chrome.storage

extracted_from_files

Domain
detected Domain: globalthis.chrome.runtime.id

XIOC detected Domain: globalthis.chrome.runtime.id

extracted_from_files

Domain
detected Domain: globalthis.chrome

XIOC detected Domain: globalthis.chrome

extracted_from_files

Domain
detected Domain: newtextnode.data

XIOC detected Domain: newtextnode.data

extracted_from_files

Domain
detected Domain: slice.call

XIOC detected Domain: slice.call

extracted_from_files

Domain
detected Domain: www.yellowsnotes.cloud

XIOC detected Domain: www.yellowsnotes.cloud

extracted_from_files

Domain
detected Domain: window.open

XIOC detected Domain: window.open

extracted_from_files

Domain
detected Domain: yellonotes.cloud

XIOC detected Domain: yellonotes.cloud

extracted_from_files

Domain
detected Domain: rect.top

XIOC detected Domain: rect.top

extracted_from_files

Domain
detected Domain: canvas.id

XIOC detected Domain: canvas.id

extracted_from_files

Domain
detected Domain: iframedocument.open

XIOC detected Domain: iframedocument.open

extracted_from_files

Domain
detected Domain: event.target

XIOC detected Domain: event.target

extracted_from_files

Domain
detected Domain: togglebutton.click

XIOC detected Domain: togglebutton.click

extracted_from_files

Domain
detected Domain: wrapper.call

XIOC detected Domain: wrapper.call

extracted_from_files

Domain
detected Domain: globalthis.browser.runtime.id

XIOC detected Domain: globalthis.browser.runtime.id

extracted_from_files

Domain
detected Domain: undobtn.click

XIOC detected Domain: undobtn.click

extracted_from_files

Domain
detected Domain: imgdata.data

XIOC detected Domain: imgdata.data

extracted_from_files

Domain
detected Domain: croprect.style.top

XIOC detected Domain: croprect.style.top

extracted_from_files

Domain
detected Domain: img.data

XIOC detected Domain: img.data

extracted_from_files

Domain
detected Domain: ctx.save

XIOC detected Domain: ctx.save

extracted_from_files

Domain
detected Domain: doc.open

XIOC detected Domain: doc.open

extracted_from_files

Domain
detected Domain: mycanvas.id

XIOC detected Domain: mycanvas.id

extracted_from_files

Domain
detected Domain: closeicon.style.top

XIOC detected Domain: closeicon.style.top

extracted_from_files

Domain
detected Domain: overlay.style.top

XIOC detected Domain: overlay.style.top

extracted_from_files

Domain
detected Domain: img.style.top

XIOC detected Domain: img.style.top

extracted_from_files

Domain
detected Domain: iframedoc.open

XIOC detected Domain: iframedoc.open

extracted_from_files

Domain
detected Domain: event.data

XIOC detected Domain: event.data

extracted_from_files

Domain
detected Domain: cropbtn.click

XIOC detected Domain: cropbtn.click

extracted_from_files

Domain
detected Domain: e.data

XIOC detected Domain: e.data

extracted_from_files

Domain
detected Domain: messagebox.style.top

XIOC detected Domain: messagebox.style.top

extracted_from_files

Domain
detected Domain: node.style.top

XIOC detected Domain: node.style.top

extracted_from_files

Domain
detected Domain: www.w3schools.com

XIOC detected Domain: www.w3schools.com

extracted_from_files

Domain
detected Domain: request.is

XIOC detected Domain: request.is

extracted_from_files

Domain
detected Domain: request.tab

XIOC detected Domain: request.tab

extracted_from_files

Domain
detected Domain: request.info

XIOC detected Domain: request.info

extracted_from_files

Domain
detected Domain: yellownotes.cloud

XIOC detected Domain: yellownotes.cloud

extracted_from_files

Domain
detected Domain: response.data

XIOC detected Domain: response.data

extracted_from_files

Domain
detected Domain: noteroot.ge

XIOC detected Domain: noteroot.ge

extracted_from_files

Domain
detected Domain: date.now

XIOC detected Domain: date.now

extracted_from_files

Domain
detected Domain: item.name

XIOC detected Domain: item.name

extracted_from_files

Domain
detected Domain: d.open

XIOC detected Domain: d.open

extracted_from_files

Domain
detected Domain: container.id

XIOC detected Domain: container.id

extracted_from_files

Domain
detected Domain: capturedimageframetable.style.top

XIOC detected Domain: capturedimageframetable.style.top

extracted_from_files

Domain
detected Domain: tablecontainer.style.top

XIOC detected Domain: tablecontainer.style.top

extracted_from_files

Domain
detected Domain: e.target

XIOC detected Domain: e.target

extracted_from_files

Domain
detected Domain: iframe.contentwindow.document.open

XIOC detected Domain: iframe.contentwindow.document.open

extracted_from_files

Domain
detected Domain: result.page

XIOC detected Domain: result.page

extracted_from_files

Domain
detected Domain: attr1.name

XIOC detected Domain: attr1.name

extracted_from_files

Domain
detected Domain: element2.style.top

XIOC detected Domain: element2.style.top

extracted_from_files

Domain
detected Domain: textnodes.map

XIOC detected Domain: textnodes.map

extracted_from_files

Domain
detected Domain: data.box

XIOC detected Domain: data.box

extracted_from_files

Domain
detected Domain: creatordetails.box

XIOC detected Domain: creatordetails.box

extracted_from_files

Domain
detected Domain: secondnode.style.top

XIOC detected Domain: secondnode.style.top

extracted_from_files

Domain
detected Domain: firstrect.top

XIOC detected Domain: firstrect.top

extracted_from_files

Domain
detected Domain: obj.box

XIOC detected Domain: obj.box

extracted_from_files

Domain
detected Domain: style.top

XIOC detected Domain: style.top

extracted_from_files

Domain
detected Domain: insertednode.style.top

XIOC detected Domain: insertednode.style.top

extracted_from_files

Domain
detected Domain: this.data

XIOC detected Domain: this.data

extracted_from_files

Domain
detected Domain: window.location.search

XIOC detected Domain: window.location.search

extracted_from_files

Domain
detected Domain: document.body.style.top

XIOC detected Domain: document.body.style.top

extracted_from_files

Domain
detected Domain: node.style

XIOC detected Domain: node.style

extracted_from_files

Domain
detected Domain: closebutton.style.top

XIOC detected Domain: closebutton.style.top

extracted_from_files

Domain
detected Domain: qrcontainer.style.top

XIOC detected Domain: qrcontainer.style.top

extracted_from_files

Domain
detected Domain: element.style

XIOC detected Domain: element.style

extracted_from_files

Domain
detected Domain: handle.id

XIOC detected Domain: handle.id

extracted_from_files

Domain
detected Domain: frame.style.top

XIOC detected Domain: frame.style.top

extracted_from_files

Domain
detected Domain: frame.id

XIOC detected Domain: frame.id

extracted_from_files

Domain
detected Domain: d.call

XIOC detected Domain: d.call

extracted_from_files

Domain
detected Domain: fsuccess.call

XIOC detected Domain: fsuccess.call

extracted_from_files

Domain
detected Domain: ffail.call

XIOC detected Domain: ffail.call

extracted_from_files

Domain
detected Domain: j.rs

XIOC detected Domain: j.rs

extracted_from_files

Domain
detected Domain: www.inkscape.org

XIOC detected Domain: www.inkscape.org

extracted_from_files

Domain
detected Domain: 4ٹ.dk

XIOC detected Domain: 4ٹ.dk

extracted_from_files

Domain
detected Domain: w.bi

XIOC detected Domain: w.bi

extracted_from_files

Domain
detected Domain: message.bot

XIOC detected Domain: message.bot

extracted_from_files

IP
detected Domain: tooltip.show

XIOC detected Domain: tooltip.show

extracted_from_files

Domain
detected Domain: button.style.top

XIOC detected Domain: button.style.top

extracted_from_files

Domain
detected Domain: button.id

XIOC detected Domain: button.id

extracted_from_files

Domain
detected Domain: k.bs

XIOC detected Domain: k.bs

extracted_from_files

Domain
detected Domain: k.br

XIOC detected Domain: k.br

extracted_from_files

Domain
detected Domain: h.eu

XIOC detected Domain: h.eu

extracted_from_files

Domain
detected Domain: r.ua

XIOC detected Domain: r.ua

extracted_from_files

Domain
detected Domain: i.lb

XIOC detected Domain: i.lb

extracted_from_files

Domain
detected Domain: s.sx

XIOC detected Domain: s.sx

extracted_from_files

Domain
detected Domain: 3.na

XIOC detected Domain: 3.na

extracted_from_files

Domain
detected Domain: 9.cz

XIOC detected Domain: 9.cz

extracted_from_files

Domain
detected Domain: 1g.qa

XIOC detected Domain: 1g.qa

extracted_from_files

Domain
detected Domain: i.ee

XIOC detected Domain: i.ee

extracted_from_files

Domain
detected Domain: a6.fm

XIOC detected Domain: a6.fm

extracted_from_files

Domain
detected Domain: o.sr

XIOC detected Domain: o.sr

extracted_from_files

Domain
detected Domain: api.yellownotes.cloud

XIOC detected Domain: api.yellownotes.cloud

extracted_from_files

Domain
detected Domain: link.target

XIOC detected Domain: link.target

extracted_from_files

Domain
detected Domain: nϧmt.mk

XIOC detected Domain: nϧmt.mk

extracted_from_files

Domain
detected Domain: sn.dj

XIOC detected Domain: sn.dj

extracted_from_files

Domain
detected Domain: qa.so

XIOC detected Domain: qa.so

extracted_from_files

Domain
detected Domain: j.gm

XIOC detected Domain: j.gm

extracted_from_files

Domain
detected Domain: x5.sy

XIOC detected Domain: x5.sy

extracted_from_files

Domain
detected Domain: m.cl

XIOC detected Domain: m.cl

extracted_from_files

Domain
detected Domain: zn.ar

XIOC detected Domain: zn.ar

extracted_from_files

Domain
detected Domain: ڃ.sv

XIOC detected Domain: ڃ.sv

extracted_from_files

Domain
detected Domain: vv.ec

XIOC detected Domain: vv.ec

extracted_from_files

Domain
detected Domain: 7.zw

XIOC detected Domain: 7.zw

extracted_from_files

Domain
detected Domain: a.uy

XIOC detected Domain: a.uy

extracted_from_files

Domain
detected Domain: i.tz

XIOC detected Domain: i.tz

extracted_from_files

Domain
detected Domain: 3h.it

XIOC detected Domain: 3h.it

extracted_from_files

Domain
detected Domain: 4.gn

XIOC detected Domain: 4.gn

extracted_from_files

Domain
detected Domain: u.tv

XIOC detected Domain: u.tv

extracted_from_files

Domain
detected Domain: z.nr

XIOC detected Domain: z.nr

extracted_from_files

Domain
detected Domain: 4.cz

XIOC detected Domain: 4.cz

extracted_from_files

Domain
detected Domain: t.ls

XIOC detected Domain: t.ls

extracted_from_files

Domain
detected Domain: v.mh

XIOC detected Domain: v.mh

extracted_from_files

Domain
detected Domain: o.ug

XIOC detected Domain: o.ug

extracted_from_files

Domain
detected Domain: h.li

XIOC detected Domain: h.li

extracted_from_files

Domain
detected Domain: p.si

XIOC detected Domain: p.si

extracted_from_files

Domain
detected Domain: gnn.vn

XIOC detected Domain: gnn.vn

extracted_from_files

Domain
detected Domain: 6.ky

XIOC detected Domain: 6.ky

extracted_from_files

Domain
detected Domain: 0.ir

XIOC detected Domain: 0.ir

extracted_from_files

Domain
detected Domain: 444444444.gh

XIOC detected Domain: 444444444.gh

extracted_from_files

Domain
detected Domain: h.sd

XIOC detected Domain: h.sd

extracted_from_files

Domain
detected Domain: v.na

XIOC detected Domain: v.na

extracted_from_files

Domain
detected Domain: c.tj

XIOC detected Domain: c.tj

extracted_from_files

Domain
detected Domain: ށ.ml

XIOC detected Domain: ށ.ml

extracted_from_files

Domain
detected Domain: l.bf

XIOC detected Domain: l.bf

extracted_from_files

Domain
detected Domain: f7.cd

XIOC detected Domain: f7.cd

extracted_from_files

Domain
detected Domain: w.mp

XIOC detected Domain: w.mp

extracted_from_files

Domain
detected Domain: 66.md

XIOC detected Domain: 66.md

extracted_from_files

Domain
detected Domain: x.cl

XIOC detected Domain: x.cl

extracted_from_files

Domain
detected Domain: 5.ir

XIOC detected Domain: 5.ir

extracted_from_files

Domain
detected Domain: m.in

XIOC detected Domain: m.in

extracted_from_files

Domain
detected Domain: 0.fm

XIOC detected Domain: 0.fm

extracted_from_files

Domain
detected Domain: ham.cm

XIOC detected Domain: ham.cm

extracted_from_files

Domain
detected Domain: 0sw.gu

XIOC detected Domain: 0sw.gu

extracted_from_files

Domain
detected Domain: np.bh

XIOC detected Domain: np.bh

extracted_from_files

Domain
detected Domain: y.ci

XIOC detected Domain: y.ci

extracted_from_files

Domain
detected Domain: val.to

XIOC detected Domain: val.to

extracted_from_files

Domain
detected Domain: app.id

XIOC detected Domain: app.id

extracted_from_files

Domain
detected Domain: sources.map

XIOC detected Domain: sources.map

extracted_from_files

Domain
detected Domain: x.name

XIOC detected Domain: x.name

extracted_from_files

Domain
detected Domain: cb.dataset.id

XIOC detected Domain: cb.dataset.id

extracted_from_files

Domain
detected Domain: finalselected.map

XIOC detected Domain: finalselected.map

extracted_from_files

Domain
detected Domain: widthtogglebutton.click

XIOC detected Domain: widthtogglebutton.click

extracted_from_files

Domain
detected Domain: base.map

XIOC detected Domain: base.map

extracted_from_files

Domain
detected Domain: tr.data

XIOC detected Domain: tr.data

extracted_from_files

Domain
detected Domain: s.id

XIOC detected Domain: s.id

extracted_from_files

Domain
detected Domain: input.id

XIOC detected Domain: input.id

extracted_from_files

Domain
detected Domain: toggle.style.gap

XIOC detected Domain: toggle.style.gap

extracted_from_files

Domain
detected Domain: wrap.style.gap

XIOC detected Domain: wrap.style.gap

extracted_from_files

Domain
detected Domain: wrap.id

XIOC detected Domain: wrap.id

extracted_from_files

URL
detected Domain: urlinput.id

XIOC detected Domain: urlinput.id

extracted_from_files

Domain
detected Domain: sentinel.id

XIOC detected Domain: sentinel.id

extracted_from_files

Domain
detected Domain: tablestate.data

XIOC detected Domain: tablestate.data

extracted_from_files

Domain
detected Domain: entries.map

XIOC detected Domain: entries.map

extracted_from_files

Domain
detected Domain: a.target

XIOC detected Domain: a.target

extracted_from_files

Domain
detected Domain: filterobj.to

XIOC detected Domain: filterobj.to

extracted_from_files

Domain
detected Domain: col.data

XIOC detected Domain: col.data

extracted_from_files

Domain
detected Domain: bannerimgelement.id

XIOC detected Domain: bannerimgelement.id

extracted_from_files

Domain
detected Domain: res.data

XIOC detected Domain: res.data

extracted_from_files

Domain
detected Domain: obj.data

XIOC detected Domain: obj.data

extracted_from_files

Domain
detected Domain: listcontent.id

XIOC detected Domain: listcontent.id

extracted_from_files

Domain
detected Domain: closebtn.id

XIOC detected Domain: closebtn.id

extracted_from_files

URL
detected Domain: urllist.id

XIOC detected Domain: urllist.id

extracted_from_files

Domain
detected Domain: icon.id

XIOC detected Domain: icon.id

extracted_from_files

Domain
detected Domain: t2.id

XIOC detected Domain: t2.id

extracted_from_files

Domain
detected Domain: inner.id

XIOC detected Domain: inner.id

extracted_from_files

Domain
detected Domain: t0.id

XIOC detected Domain: t0.id

extracted_from_files

IP
detected Domain: tip.style.top

XIOC detected Domain: tip.style.top

extracted_from_files

Domain
detected Domain: limits.box

XIOC detected Domain: limits.box

extracted_from_files

Domain
detected Domain: ret.data

XIOC detected Domain: ret.data

extracted_from_files

Domain
detected Domain: fileinput.click

XIOC detected Domain: fileinput.click

extracted_from_files

Domain
detected Domain: r11.id

XIOC detected Domain: r11.id

extracted_from_files

Domain
detected Domain: btn.id

XIOC detected Domain: btn.id

extracted_from_files

Domain
detected Domain: inp.id

XIOC detected Domain: inp.id

extracted_from_files

URL
detected Domain: urlline.id

XIOC detected Domain: urlline.id

extracted_from_files

URL
detected Domain: urlline.style.gap

XIOC detected Domain: urlline.style.gap

extracted_from_files

Domain
detected Domain: iframe.id

XIOC detected Domain: iframe.id

extracted_from_files

Domain
detected Domain: ta.id

XIOC detected Domain: ta.id

extracted_from_files

Domain
detected Domain: host.id

XIOC detected Domain: host.id

extracted_from_files

Domain
detected Domain: tools.id

XIOC detected Domain: tools.id

extracted_from_files

Domain
detected Domain: croplayer.id

XIOC detected Domain: croplayer.id

extracted_from_files

Domain
detected Domain: canvashost.id

XIOC detected Domain: canvashost.id

extracted_from_files

Domain
detected Domain: editable.id

XIOC detected Domain: editable.id

extracted_from_files

Domain
detected Domain: bar.id

XIOC detected Domain: bar.id

extracted_from_files

Domain
detected Domain: viewport.id

XIOC detected Domain: viewport.id

extracted_from_files

Domain
detected Domain: ta.select

XIOC detected Domain: ta.select

extracted_from_files

Domain
detected Domain: box.style

XIOC detected Domain: box.style

extracted_from_files

Domain
detected Domain: modal.style

XIOC detected Domain: modal.style

extracted_from_files

Domain
detected Domain: modal.id

XIOC detected Domain: modal.id

extracted_from_files

Domain
detected Domain: hr.top

XIOC detected Domain: hr.top

extracted_from_files

Domain
detected Domain: croprectel.style.top

XIOC detected Domain: croprectel.style.top

extracted_from_files

Domain
detected Domain: uri.id

XIOC detected Domain: uri.id

extracted_from_files

Domain
detected Domain: filedropwindow.style.top

XIOC detected Domain: filedropwindow.style.top

extracted_from_files

Domain
detected Domain: downloadlink.click

XIOC detected Domain: downloadlink.click

extracted_from_files

Domain
detected Domain: downloadlink.download

XIOC detected Domain: downloadlink.download

extracted_from_files

Domain
detected Domain: window.chrome

XIOC detected Domain: window.chrome

extracted_from_files

Domain
detected Domain: warning.id

XIOC detected Domain: warning.id

extracted_from_files

Domain
detected Domain: errs.map

XIOC detected Domain: errs.map

extracted_from_files

Domain
detected Domain: formcontainer.id

XIOC detected Domain: formcontainer.id

extracted_from_files

Domain
detected Domain: www.geeksforgeeks.org

XIOC detected Domain: www.geeksforgeeks.org

extracted_from_files

Domain
detected Domain: rows.map

XIOC detected Domain: rows.map

extracted_from_files

Domain
detected Domain: file.name

XIOC detected Domain: file.name

extracted_from_files

Domain
detected Domain: filelist.id

XIOC detected Domain: filelist.id

extracted_from_files

Domain
detected Domain: row.name

XIOC detected Domain: row.name

extracted_from_files

Domain
detected Domain: buttoncancel.id

XIOC detected Domain: buttoncancel.id

extracted_from_files

Domain
detected Domain: data.name

XIOC detected Domain: data.name

extracted_from_files

Domain
detected Domain: rowdata.name

XIOC detected Domain: rowdata.name

extracted_from_files

Domain
detected Domain: res.name

XIOC detected Domain: res.name

extracted_from_files

Domain
detected Domain: link2.name

XIOC detected Domain: link2.name

extracted_from_files

Domain
detected Domain: link2.target

XIOC detected Domain: link2.target

extracted_from_files

Domain
detected Domain: www.sciencealert.com

XIOC detected Domain: www.sciencealert.com

extracted_from_files

Domain
detected Domain: viewpromptsbuttoncontainer.id

XIOC detected Domain: viewpromptsbuttoncontainer.id

extracted_from_files

Domain
detected Domain: rowdata.chat

XIOC detected Domain: rowdata.chat

extracted_from_files

Domain
detected Domain: r.id

XIOC detected Domain: r.id

extracted_from_files

Domain
detected Domain: table.id

XIOC detected Domain: table.id

extracted_from_files

Domain
detected Domain: tablecontainer.id

XIOC detected Domain: tablecontainer.id

extracted_from_files

Domain
detected Domain: overlay.id

XIOC detected Domain: overlay.id

extracted_from_files

Domain
detected Domain: it.date

XIOC detected Domain: it.date

extracted_from_files

Domain
detected Domain: row.email

XIOC detected Domain: row.email

extracted_from_files

Domain
detected Domain: attr.name

XIOC detected Domain: attr.name

extracted_from_files

Domain
detected Domain: nodefilter.show

XIOC detected Domain: nodefilter.show

extracted_from_files

Domain
detected Domain: item.data

XIOC detected Domain: item.data

extracted_from_files

Domain
detected Domain: 252fasletoje.no

XIOC detected Domain: 252fasletoje.no

extracted_from_files

Domain
detected Domain: 2fmicroservices.yellownotes.cloud

XIOC detected Domain: 2fmicroservices.yellownotes.cloud

extracted_from_files

Domain
detected Domain: berjon.com

XIOC detected Domain: berjon.com

extracted_from_files

Domain
detected Domain: sharebutton.style

XIOC detected Domain: sharebutton.style

extracted_from_files

Domain
detected Domain: chrome.runtime.id

XIOC detected Domain: chrome.runtime.id

extracted_from_files

Domain
detected Domain: tmp.style

XIOC detected Domain: tmp.style

extracted_from_files

Domain
detected Domain: array.prototype.slice.call

XIOC detected Domain: array.prototype.slice.call

extracted_from_files

Domain
detected Domain: rgbvalues.map

XIOC detected Domain: rgbvalues.map

extracted_from_files

Domain
detected Domain: btn.click

XIOC detected Domain: btn.click

extracted_from_files

URL
detected URL: https://www.yellownotes.cloud/logoutforplugin

XIOC detected URL: https://www.yellownotes.cloud/logoutforplugin

extracted_from_files

URL
detected URL: https://www.yellownotes.cloud/go_to_plugin

XIOC detected URL: https://www.yellownotes.cloud/go_to_plugin

extracted_from_files

URL
detected URL: https://www.yellownotes.cloud/post_install_redirect_target

XIOC detected URL: https://www.yellownotes.cloud/post_install_redirect_target

extracted_from_files

URL
detected URL: https://developer.chrome.com/docs/extensions/reference/api/action

XIOC detected URL: https://developer.chrome.com/docs/extensions/reference/api/action

extracted_from_files

URL
detected URL: https://www.yellownotes.cloud

XIOC detected URL: https://www.yellownotes.cloud

extracted_from_files

URL
detected URL: https://api.yellownotes.cloud

XIOC detected URL: https://api.yellownotes.cloud

extracted_from_files

Domain
detected Domain: tabinfo.id

XIOC detected Domain: tabinfo.id

extracted_from_files

URL
detected URL: https://www.yellownotes.cloud/pages/gothere.html?noteid=

XIOC detected URL: https://www.yellownotes.cloud/pages/gothere.html?noteid=

extracted_from_files

URL
detected URL: https://www.yellownotes.cloud/pages/subscribe.html?add_topicid=

XIOC detected URL: https://www.yellownotes.cloud/pages/subscribe.html?add_topicid=

extracted_from_files

URL
detected URL: https://www.yellownotes.cloud/pages/view_yellownote.html

XIOC detected URL: https://www.yellownotes.cloud/pages/view_yellownote.html

extracted_from_files

URL
detected URL: https://github.com/mozilla/webextension-polyfill/issues/130

XIOC detected URL: https://github.com/mozilla/webextension-polyfill/issues/130

extracted_from_files

URL
detected URL: http://mozilla.org/MPL/2.0/.

XIOC detected URL: http://mozilla.org/MPL/2.0/.

extracted_from_files

URL
detected URL: http://www.webtoolkit.info/

XIOC detected URL: http://www.webtoolkit.info/

extracted_from_files

URL
detected URL: https://stackoverflow.com/questions/41586400/using-indexeddb-asynchronously

XIOC detected URL: https://stackoverflow.com/questions/41586400/using-indexeddb-asynchronously

extracted_from_files

URL
detected URL: https://www.yellownotes.cloud/pages/gothere.html?noteid=efgh-5678

XIOC detected URL: https://www.yellownotes.cloud/pages/gothere.html?noteid=efgh-5678

extracted_from_files

URL
detected URL: https://www.yellownotes.cloud/pages/my_topics.html';

XIOC detected URL: https://www.yellownotes.cloud/pages/my_topics.html';

extracted_from_files

URL
detected URL: https://www.yellownotes.cloud/pages/subscribe.html?gothere.html?noteid=

XIOC detected URL: https://www.yellownotes.cloud/pages/subscribe.html?gothere.html?noteid=

extracted_from_files

URL
detected URL: https://www.w3schools.com/howto/howto_custom_select.asp

XIOC detected URL: https://www.w3schools.com/howto/howto_custom_select.asp

extracted_from_files

URL
detected URL: https://www.yellownotes.cloud/pages/view_topic.html?topicid='

XIOC detected URL: https://www.yellownotes.cloud/pages/view_topic.html?topicid='

extracted_from_files

URL
detected URL: https://www.yellownotes.cloud/pages/view_own_topic.html?topicid='

XIOC detected URL: https://www.yellownotes.cloud/pages/view_own_topic.html?topicid='

extracted_from_files

URL
detected URL: https://www.yellownotes.cloud/subscribe.html?add_topicid=

XIOC detected URL: https://www.yellownotes.cloud/subscribe.html?add_topicid=

extracted_from_files

URL
detected URL: https://www.yellownotes.cloud/loginforplugin

XIOC detected URL: https://www.yellownotes.cloud/loginforplugin

extracted_from_files

URL
detected URL: https://www.yellownotes.cloud/privacy

XIOC detected URL: https://www.yellownotes.cloud/privacy

extracted_from_files

URL
detected URL: https://www.yellownotes.cloud/downloads

XIOC detected URL: https://www.yellownotes.cloud/downloads

extracted_from_files

URL
detected URL: https://www.yellownotes.cloud/

XIOC detected URL: https://www.yellownotes.cloud/

extracted_from_files

URL
detected URL: https://www.yellownotes.cloud/support

XIOC detected URL: https://www.yellownotes.cloud/support

extracted_from_files

URL
detected URL: https://www.yellownotes.cloud/private/pages/gothere.html?noteid=

XIOC detected URL: https://www.yellownotes.cloud/private/pages/gothere.html?noteid=

extracted_from_files

URL
detected URL: https://api.yellownotes.cloud/api/v1.0/plugin_user_get_my_subscriptions?rag_allowed=1

XIOC detected URL: https://api.yellownotes.cloud/api/v1.0/plugin_user_get_my_subscriptions?rag_allowed=1

extracted_from_files

URL
detected URL: https://example.com/api/submit

XIOC detected URL: https://example.com/api/submit

extracted_from_files

URL
detected URL: https://example.com/api/creators

XIOC detected URL: https://example.com/api/creators

extracted_from_files

URL
detected URL: https://fontawesome.com/license/free

XIOC detected URL: https://fontawesome.com/license/free

extracted_from_files

URL
detected URL: https://fontawesome.com

XIOC detected URL: https://fontawesome.com

extracted_from_files

URL
detected URL: https://www.yellownotes.cloud/private/pages/subscribe.html?add_topicid=

XIOC detected URL: https://www.yellownotes.cloud/private/pages/subscribe.html?add_topicid=

extracted_from_files

URL
detected URL: https://www.yellownotes.cloud/private/pages/view_topic.html?topicid='

XIOC detected URL: https://www.yellownotes.cloud/private/pages/view_topic.html?topicid='

extracted_from_files

URL
detected URL: https://www.yellownotes.cloud/private/pages/view_own_topic.html?topicid='

XIOC detected URL: https://www.yellownotes.cloud/private/pages/view_own_topic.html?topicid='

extracted_from_files

URL
detected URL: https://example.com

XIOC detected URL: https://example.com

extracted_from_files

URL
detected URL: https://www.geeksforgeeks.org

XIOC detected URL: https://www.geeksforgeeks.org

extracted_from_files

URL
detected URL: https://www.yellownotes.cloud/logout

XIOC detected URL: https://www.yellownotes.cloud/logout

extracted_from_files

URL
detected URL: https://example.com/

XIOC detected URL: https://example.com/

extracted_from_files

URL
detected URL: https://www.yellownotes.cloud/pages/view_yellownote.html?

XIOC detected URL: https://www.yellownotes.cloud/pages/view_yellownote.html?

extracted_from_files

URL
detected URL: https://www.yellownotes.cloud/login?redirect_to_plugin_page=true

XIOC detected URL: https://www.yellownotes.cloud/login?redirect_to_plugin_page=true

extracted_from_files

URL
detected URL: https://www.yellownotes.cloud/loginpage

XIOC detected URL: https://www.yellownotes.cloud/loginpage

extracted_from_files

URL
detected URL: https://www.sciencealert.com/breaking-major-antimatter-discovery-may-help-solve-mystery-of-existence

XIOC detected URL: https://www.sciencealert.com/breaking-major-antimatter-discovery-may-help-solve-mystery-of-existence

extracted_from_files

URL
detected URL: https://www.yellownotes.cloud/pages/make_there.html?note_type=plaintext&noteid=temp_118a2b78-2ec0-15b5-2172-762ed8f5e7b8&message_display_text=IkVuaGV0c2t1bHR1cmVuIGhhciBzbmFydCBnw6V0dCB0YXB0IiAuLiB2aXJrZWxpZyA%2F&posx=50px&posy=200px&selection_text=RW5oZXRza3VsdHVyZW4gaGFyIHNuYXJ0IGfDpXR0IHRhcHQ%3D&url=https%253A%252F%252Fasletoje.no%252Fvil-norge-overleve-det-som-kommer%252F&note_color=%23ffff00&box_height=384px&box_width=344px&header_t=SSB3cm90ZSB0aGlz

XIOC detected URL: https://www.yellownotes.cloud/pages/make_there.html?note_type=plaintext&noteid=temp_118a2b78-2ec0-15b5-2172-762ed8f5e7b8&message_display_text=IkVuaGV0c2t1bHR1cmVuIGhhciBzbmFydCBnw6V0dCB0YXB0IiAuLiB2aXJrZWxpZyA%2F&posx=50px&posy=200px&selection_text=RW5oZXRza3VsdHVyZW4gaGFyIHNuYXJ0IGfDpXR0IHRhcHQ%3D&url=https%253A%252F%252Fasletoje.no%252Fvil-norge-overleve-det-som-kommer%252F&note_color=%23ffff00&box_height=384px&box_width=344px&header_t=SSB3cm90ZSB0aGlz

extracted_from_files

URL
detected URL: https://www.yellownotes.cloud/pages/make_there.html?note_type=webframe&noteid=temp_ee95346e-2437-a153-f1cc-43e241a33d85&framenote_url=https%3A%2F%2Fmicroservices.yellownotes.cloud%2Fservices%2Fcommentaryfield%2F43c02614-3190-4e6b-8939-bdcbe4e235e1&framenote_scroll_x=0&framenote_scroll_y=0&framenote_h=400&framenote_w=380&framenote_zoom=100&posx=50px&posy=200px&selection_text=RW5oZXRza3VsdHVyZW4gaGFyIHNuYXJ0IGfDpXR0IHRhcHQu&url=https%253A%252F%252Fasletoje.no%252Fvil-norge-overleve-det-som-kommer%252F&note_color=%23ffff00&box_height=380px&box_width=382px&header_t=b2ssIHZpIHByw7h2ZXIgZGV0dGUuIC1MYXJz

XIOC detected URL: https://www.yellownotes.cloud/pages/make_there.html?note_type=webframe&noteid=temp_ee95346e-2437-a153-f1cc-43e241a33d85&framenote_url=https%3A%2F%2Fmicroservices.yellownotes.cloud%2Fservices%2Fcommentaryfield%2F43c02614-3190-4e6b-8939-bdcbe4e235e1&framenote_scroll_x=0&framenote_scroll_y=0&framenote_h=400&framenote_w=380&framenote_zoom=100&posx=50px&posy=200px&selection_text=RW5oZXRza3VsdHVyZW4gaGFyIHNuYXJ0IGfDpXR0IHRhcHQu&url=https%253A%252F%252Fasletoje.no%252Fvil-norge-overleve-det-som-kommer%252F&note_color=%23ffff00&box_height=380px&box_width=382px&header_t=b2ssIHZpIHByw7h2ZXIgZGV0dGUuIC1MYXJz

extracted_from_files

URL
detected URL: https://www.yellownotes.cloud/popup/popup.html

XIOC detected URL: https://www.yellownotes.cloud/popup/popup.html

extracted_from_files

URL
detected URL: https://www.yellownotes.cloud/pages/my_subscriptions.html

XIOC detected URL: https://www.yellownotes.cloud/pages/my_subscriptions.html

extracted_from_files

URL
detected URL: https://www.yellownotes.cloud/pages/yellownotes_feed.html

XIOC detected URL: https://www.yellownotes.cloud/pages/yellownotes_feed.html

extracted_from_files

URL
detected URL: https://www.yellownotes.cloud/pages/my_notes.html

XIOC detected URL: https://www.yellownotes.cloud/pages/my_notes.html

extracted_from_files

URL
detected URL: http://berjon.com/blog/2009/07/force-svg.html

XIOC detected URL: http://berjon.com/blog/2009/07/force-svg.html

extracted_from_files

URL
detected URL: https://clients2.google.com/service/update2/crx

XIOC detected URL: https://clients2.google.com/service/update2/crx

extracted_from_files

Hash
detected MD5 Hash: c8552a7431745d0f2c53af986eed3e14

XIOC detected MD5 Hash: c8552a7431745d0f2c53af986eed3e14

extracted_from_files

IP
detected IP: ::e

XIOC detected IP: ::e

extracted_from_files

Domain
detected Domain: browsersolutions.no

XIOC detected Domain: browsersolutions.no

extracted_from_files

Domain
detected Domain: alarm.name

XIOC detected Domain: alarm.name

extracted_from_files

Domain
detected Domain: video.play

XIOC detected Domain: video.play

extracted_from_files

Domain
detected Domain: link.name

XIOC detected Domain: link.name

extracted_from_files

IP
detected IP: 4.1.0.2

XIOC detected IP: 4.1.0.2

extracted_from_files

Domain
detected Domain: λ.cu

XIOC detected Domain: λ.cu

extracted_from_files

Security Analysis Summary

Security Analysis Overview

Yellow Notes for the Cloud is a Chrome Web Store extension published by [email protected]. Version 2.2.2 has been analyzed by the Risky Plugins security platform, receiving a risk score of 100/100 (CRITICAL risk) based on 657 security findings.

Risk Assessment

This extension presents critical security risk. Severe issues were detected, potentially including malware indicators, exposed secrets, or dangerous behaviors. Installation is strongly discouraged until these issues are addressed.

Findings Breakdown

  • Medium: 394 finding(s)
  • Low: 263 finding(s)

What Was Analyzed

The security assessment covers multiple analysis categories:

  • Malware Detection: YARA rule matching against 2,400+ malware signatures
  • Secret Detection: Scanning for exposed API keys, tokens, and credentials
  • Static Analysis: Code-level security analysis for common vulnerability patterns
  • Network Analysis: Detection of suspicious network communications and endpoints
  • Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

Yellow Notes for the Cloud is published by [email protected] on the Chrome Web Store marketplace. The extension has approximately 8 users.

Recommendation

This extension is not recommended for installation without thorough manual review. Consider alternatives with lower risk scores, or contact the developer to address the identified security concerns.

Frequently Asked Questions