Is Dropship Tracking and TBA Conversion safe to use?

Dropship Tracking and TBA Conversion has a security risk score of 56.9/100 (MEDIUM risk). Our security analysis detected 336 findings. Review the detailed security assessment below to understand the specific risks before installation.

What are the security risks of Dropship Tracking and TBA Conversion?

Based on our automated security analysis, Dropship Tracking and TBA Conversion presents medium risk level. The extension is analyzed for malware patterns, secret exposure, network communications, permissions, and supply chain vulnerabilities.

How is the security score calculated?

Risky Plugins calculates security scores using weighted categories: severity of findings (25 points max), malware detections (35 points), secret exposure (28 points), network communications (10 points), and obfuscation (10 points). Scores range from 0-100, with higher scores indicating greater risk.

What does CRITICAL, HIGH, MEDIUM, LOW, MINIMAL risk mean?

CRITICAL (80-100): Severe security issues like malware. HIGH (60-79): Significant vulnerabilities. MEDIUM (40-59): Moderate security concerns. LOW (20-39): Minor issues. MINIMAL (0-19): Very low risk. Always review findings before installing any extension.

Is "Dropship Tracking and TBA Conversion" on Chrome Web Store Safe to Install?

[email protected] · chrome · v3.3

The Dropship Tracking Extension is for users wanting to convert their AMZL Tracking numbers to a different format that is acceptable by marketplaces. You can run the conversion for single tracking numbers or for all TBA numbers. It drastically speeds up the conversion and submission process.

Risk Assessment

Analyzed

56.9

out of 100

MEDIUM

336 security findings detected across all analyzers

Chrome extension requesting 11 permissions

Severity Breakdown

Critical

High

298

Medium

Low

Info

Finding Categories

Malware Signatures

Network

275

IoC Indicators

YARA Rules Matched

12 rules(38 hits)

postinstall file download postinstall obfuscation postinstall network communication postinstall persistence mechanism postinstall file manipulation credential skype data postinstall system command postinstall crypto operations NoUseWeakRandom credential env files credential steam data postinstall registry modification

Requested Permissions

11 permissions

identity

Access your identity and sign-in tokens

High

webRequestBlocking

Block network requests before they complete

High

webRequest

Intercept, modify, and block all network requests

High

notifications

Low

identity.email

Low

http://3.86.137.112/*

Low

https://connectorange.io/*

Low

https://www.amazon.com/*

Low

https://www.amazon.it/*

Low

https://www.amazon.ca/*

Low

https://www.bluecare.express/api/AddInfo

Low

About This Extension

Detailed Findings

53 total

YARA Rule Matches

12 rules

Indicators of Compromise

Network indicators, suspicious strings, and potential IoCs extracted during analysis

URLs

IP Addresses

Domains

225

Strings

275

All Indicators · 275

Domain

detected Domain: i.icon.aws

XIOC detected Domain: i.icon.aws

extracted_from_files

Domain

detected Domain: i.icon.audible

XIOC detected Domain: i.icon.audible

extracted_from_files

detected IP: ea::be

XIOC detected IP: ea::be

extracted_from_files

detected IP: f::

XIOC detected IP: f::

extracted_from_files

detected IP: 2::

XIOC detected IP: 2::

extracted_from_files

detected IP: ::

XIOC detected IP: ::

extracted_from_files

Domain

detected Domain: www.bluecare.express

XIOC detected Domain: www.bluecare.express

extracted_from_files

Domain

detected Domain: www.amazon.ca

XIOC detected Domain: www.amazon.ca

extracted_from_files

Domain

detected Domain: www.amazon.it

XIOC detected Domain: www.amazon.it

extracted_from_files

Domain

detected Domain: www.amazon.com

XIOC detected Domain: www.amazon.com

extracted_from_files

Domain

detected Domain: userinfo.email

XIOC detected Domain: userinfo.email

extracted_from_files

Domain

detected Domain: licenses.sceptermarketing.com

XIOC detected Domain: licenses.sceptermarketing.com

extracted_from_files

detected IP: c::d

XIOC detected IP: c::d

extracted_from_files

Domain

detected Domain: identity.email

XIOC detected Domain: identity.email

extracted_from_files

Domain

detected Domain: clients2.google.com

XIOC detected Domain: clients2.google.com

extracted_from_files

Domain

detected Domain: sender.tab.id

XIOC detected Domain: sender.tab.id

extracted_from_files

Domain

detected Domain: createdwindow.id

XIOC detected Domain: createdwindow.id

extracted_from_files

Domain

detected Domain: header.name

XIOC detected Domain: header.name

extracted_from_files

Domain

detected Domain: connectorange.io

XIOC detected Domain: connectorange.io

extracted_from_files

Domain

detected Domain: bluecare.express

XIOC detected Domain: bluecare.express

extracted_from_files

Domain

detected Domain: a.download

XIOC detected Domain: a.download

extracted_from_files

Domain

detected Domain: a.style

XIOC detected Domain: a.style

extracted_from_files

Domain

detected Domain: bceamzl.ecomcircles.com

XIOC detected Domain: bceamzl.ecomcircles.com

extracted_from_files

Domain

detected Domain: amazon.it

XIOC detected Domain: amazon.it

extracted_from_files

Domain

detected Domain: amazon.ca

XIOC detected Domain: amazon.ca

extracted_from_files

Domain

detected Domain: amazon.com

XIOC detected Domain: amazon.com

extracted_from_files

Domain

detected Domain: www.w3.org

XIOC detected Domain: www.w3.org

extracted_from_files

Domain

detected Domain: rfuenzalida.com

XIOC detected Domain: rfuenzalida.com

extracted_from_files

Domain

detected Domain: gmail.com

XIOC detected Domain: gmail.com

extracted_from_files

Domain

detected Domain: pixelspread.com

XIOC detected Domain: pixelspread.com

extracted_from_files

Domain

detected Domain: submitterbox.style

XIOC detected Domain: submitterbox.style

extracted_from_files

Domain

detected Domain: continuelink.click

XIOC detected Domain: continuelink.click

extracted_from_files

Domain

detected Domain: window.location.host

XIOC detected Domain: window.location.host

extracted_from_files

Domain

detected Domain: a.click

XIOC detected Domain: a.click

extracted_from_files

Domain

detected Domain: g.sc

XIOC detected Domain: g.sc

extracted_from_files

Domain

detected Domain: f.sc

XIOC detected Domain: f.sc

extracted_from_files

Domain

detected Domain: e.sc

XIOC detected Domain: e.sc

extracted_from_files

Domain

detected Domain: d.sc

XIOC detected Domain: d.sc

extracted_from_files

Domain

detected Domain: a.sc

XIOC detected Domain: a.sc

extracted_from_files

Domain

detected Domain: c.sc

XIOC detected Domain: c.sc

extracted_from_files

Domain

detected Domain: b.sc

XIOC detected Domain: b.sc

extracted_from_files

Domain

detected Domain: n.sc

XIOC detected Domain: n.sc

extracted_from_files

Domain

detected Domain: m.sc

XIOC detected Domain: m.sc

extracted_from_files

Domain

detected Domain: l.sc

XIOC detected Domain: l.sc

extracted_from_files

Domain

detected Domain: k.sc

XIOC detected Domain: k.sc

extracted_from_files

Domain

detected Domain: j.sc

XIOC detected Domain: j.sc

extracted_from_files

Domain

detected Domain: i.sc

XIOC detected Domain: i.sc

extracted_from_files

Domain

detected Domain: h.sc

XIOC detected Domain: h.sc

extracted_from_files

Domain

detected Domain: u.sc

XIOC detected Domain: u.sc

extracted_from_files

Domain

detected Domain: t.sc

XIOC detected Domain: t.sc

extracted_from_files

Domain

detected Domain: s.sc

XIOC detected Domain: s.sc

extracted_from_files

Domain

detected Domain: r.sc

XIOC detected Domain: r.sc

extracted_from_files

Domain

detected Domain: q.sc

XIOC detected Domain: q.sc

extracted_from_files

Domain

detected Domain: p.sc

XIOC detected Domain: p.sc

extracted_from_files

Domain

detected Domain: o.sc

XIOC detected Domain: o.sc

extracted_from_files

Domain

detected Domain: opensource.org

XIOC detected Domain: opensource.org

extracted_from_files

Domain

detected Domain: github.com

XIOC detected Domain: github.com

extracted_from_files

Domain

detected Domain: z.sc

XIOC detected Domain: z.sc

extracted_from_files

Domain

detected Domain: y.sc

XIOC detected Domain: y.sc

extracted_from_files

Domain

detected Domain: x.sc

XIOC detected Domain: x.sc

extracted_from_files

Domain

detected Domain: w.sc

XIOC detected Domain: w.sc

extracted_from_files

Domain

detected Domain: v.sc

XIOC detected Domain: v.sc

extracted_from_files

Domain

detected Domain: i.icon.android

XIOC detected Domain: i.icon.android

extracted_from_files

Domain

detected Domain: i.icon.amazon.pay

XIOC detected Domain: i.icon.amazon.pay

extracted_from_files

Domain

detected Domain: i.icon.align.center

XIOC detected Domain: i.icon.align.center

extracted_from_files

Domain

detected Domain: i.icon.address.book

XIOC detected Domain: i.icon.address.book

extracted_from_files

Domain

detected Domain: i.icon.circle

XIOC detected Domain: i.icon.circle

extracted_from_files

Domain

detected Domain: fontawesome.com

XIOC detected Domain: fontawesome.com

extracted_from_files

detected IP: d::d

XIOC detected IP: d::d

extracted_from_files

detected IP: 0a9::

XIOC detected IP: 0a9::

extracted_from_files

detected IP: 5::

XIOC detected IP: 5::

extracted_from_files

Domain

detected Domain: i.icon.at

XIOC detected Domain: i.icon.at

extracted_from_files

Domain

detected Domain: i.icon.assistive.listening.systems

XIOC detected Domain: i.icon.assistive.listening.systems

extracted_from_files

Domain

detected Domain: i.icon.apple.pay

XIOC detected Domain: i.icon.apple.pay

extracted_from_files

Domain

detected Domain: i.icon.apple

XIOC detected Domain: i.icon.apple

extracted_from_files

Domain

detected Domain: i.icon.app.store

XIOC detected Domain: i.icon.app.store

extracted_from_files

Domain

detected Domain: i.icon.cart.plus

XIOC detected Domain: i.icon.cart.plus

extracted_from_files

Domain

detected Domain: i.icon.car

XIOC detected Domain: i.icon.car

extracted_from_files

Domain

detected Domain: i.icon.camera

XIOC detected Domain: i.icon.camera

extracted_from_files

Domain

detected Domain: i.icon.calendar.plus

XIOC detected Domain: i.icon.calendar.plus

extracted_from_files

Domain

detected Domain: i.icon.box

XIOC detected Domain: i.icon.box

extracted_from_files

Domain

detected Domain: i.icon.book

XIOC detected Domain: i.icon.book

extracted_from_files

Domain

detected Domain: i.icon.beer

XIOC detected Domain: i.icon.beer

extracted_from_files

Domain

detected Domain: i.icon.cc.visa

XIOC detected Domain: i.icon.cc.visa

extracted_from_files

Domain

detected Domain: i.icon.cc.jcb

XIOC detected Domain: i.icon.cc.jcb

extracted_from_files

Domain

detected Domain: i.icon.cc.discover

XIOC detected Domain: i.icon.cc.discover

extracted_from_files

Domain

detected Domain: i.icon.cc.diners.club

XIOC detected Domain: i.icon.cc.diners.club

extracted_from_files

Domain

detected Domain: i.icon.cc.apple.pay

XIOC detected Domain: i.icon.cc.apple.pay

extracted_from_files

Domain

detected Domain: i.icon.cc.amex

XIOC detected Domain: i.icon.cc.amex

extracted_from_files

Domain

detected Domain: i.icon.cc.amazon.pay

XIOC detected Domain: i.icon.cc.amazon.pay

extracted_from_files

Domain

detected Domain: i.icon.download

XIOC detected Domain: i.icon.download

extracted_from_files

Domain

detected Domain: i.icon.dot.circle

XIOC detected Domain: i.icon.dot.circle

extracted_from_files

Domain

detected Domain: i.icon.coffee

XIOC detected Domain: i.icon.coffee

extracted_from_files

Domain

detected Domain: i.icon.cloud

XIOC detected Domain: i.icon.cloud

extracted_from_files

Domain

detected Domain: i.icon.chrome

XIOC detected Domain: i.icon.chrome

extracted_from_files

Domain

detected Domain: i.icon.check.circle

XIOC detected Domain: i.icon.check.circle

extracted_from_files

Domain

detected Domain: i.icon.chart.bar

XIOC detected Domain: i.icon.chart.bar

extracted_from_files

Domain

detected Domain: i.icon.flickr

XIOC detected Domain: i.icon.flickr

extracted_from_files

Domain

detected Domain: i.icon.fire

XIOC detected Domain: i.icon.fire

extracted_from_files

Domain

detected Domain: i.icon.film

XIOC detected Domain: i.icon.film

extracted_from_files

Domain

detected Domain: i.icon.file.video

XIOC detected Domain: i.icon.file.video

extracted_from_files

Domain

detected Domain: i.icon.file.audio

XIOC detected Domain: i.icon.file.audio

extracted_from_files

Domain

detected Domain: i.icon.exclamation.circle

XIOC detected Domain: i.icon.exclamation.circle

extracted_from_files

Domain

detected Domain: i.icon.envelope.open

XIOC detected Domain: i.icon.envelope.open

extracted_from_files

Domain

detected Domain: i.icon.gg.circle

XIOC detected Domain: i.icon.gg.circle

extracted_from_files

Domain

detected Domain: i.icon.gg

XIOC detected Domain: i.icon.gg

extracted_from_files

Domain

detected Domain: i.icon.futbol

XIOC detected Domain: i.icon.futbol

extracted_from_files

Domain

detected Domain: i.icon.free.code.camp

XIOC detected Domain: i.icon.free.code.camp

extracted_from_files

Domain

detected Domain: i.icon.fonticons.fi

XIOC detected Domain: i.icon.fonticons.fi

extracted_from_files

Domain

detected Domain: i.icon.folder.open

XIOC detected Domain: i.icon.folder.open

extracted_from_files

Domain

detected Domain: i.icon.fly

XIOC detected Domain: i.icon.fly

extracted_from_files

Domain

detected Domain: i.icon.hospital

XIOC detected Domain: i.icon.hospital

extracted_from_files

Domain

detected Domain: i.icon.hacker.news

XIOC detected Domain: i.icon.hacker.news

extracted_from_files

Domain

detected Domain: i.icon.google.plus

XIOC detected Domain: i.icon.google.plus

extracted_from_files

Domain

detected Domain: i.icon.google.play

XIOC detected Domain: i.icon.google.play

extracted_from_files

Domain

detected Domain: i.icon.google.drive

XIOC detected Domain: i.icon.google.drive

extracted_from_files

Domain

detected Domain: i.icon.google

XIOC detected Domain: i.icon.google

extracted_from_files

Domain

detected Domain: i.icon.gift

XIOC detected Domain: i.icon.gift

extracted_from_files

Domain

detected Domain: i.icon.map

XIOC detected Domain: i.icon.map

extracted_from_files

Domain

detected Domain: i.icon.low.vision

XIOC detected Domain: i.icon.low.vision

extracted_from_files

Domain

detected Domain: i.icon.lock.open

XIOC detected Domain: i.icon.lock.open

extracted_from_files

Domain

detected Domain: i.icon.linkedin.in

XIOC detected Domain: i.icon.linkedin.in

extracted_from_files

Domain

detected Domain: i.icon.info.circle

XIOC detected Domain: i.icon.info.circle

extracted_from_files

Domain

detected Domain: i.icon.info

XIOC detected Domain: i.icon.info

extracted_from_files

Domain

detected Domain: i.icon.imdb

XIOC detected Domain: i.icon.imdb

extracted_from_files

Domain

detected Domain: i.icon.page

XIOC detected Domain: i.icon.page

extracted_from_files

Domain

detected Domain: i.icon.optin.monster

XIOC detected Domain: i.icon.optin.monster

extracted_from_files

Domain

detected Domain: i.icon.object.group

XIOC detected Domain: i.icon.object.group

extracted_from_files

Domain

detected Domain: i.icon.mobile

XIOC detected Domain: i.icon.mobile

extracted_from_files

Domain

detected Domain: i.icon.minus.circle

XIOC detected Domain: i.icon.minus.circle

extracted_from_files

Domain

detected Domain: i.icon.microsoft

XIOC detected Domain: i.icon.microsoft

extracted_from_files

Domain

detected Domain: i.icon.map.pin

XIOC detected Domain: i.icon.map.pin

extracted_from_files

Domain

detected Domain: i.icon.plus.circle

XIOC detected Domain: i.icon.plus.circle

extracted_from_files

Domain

detected Domain: i.icon.plus

XIOC detected Domain: i.icon.plus

extracted_from_files

Domain

detected Domain: i.icon.playstation

XIOC detected Domain: i.icon.playstation

extracted_from_files

Domain

detected Domain: i.icon.play.circle

XIOC detected Domain: i.icon.play.circle

extracted_from_files

Domain

detected Domain: i.icon.play

XIOC detected Domain: i.icon.play

extracted_from_files

Domain

detected Domain: i.icon.phone

XIOC detected Domain: i.icon.phone

extracted_from_files

Domain

detected Domain: i.icon.pause.circle

XIOC detected Domain: i.icon.pause.circle

extracted_from_files

Domain

detected Domain: i.icon.skype

XIOC detected Domain: i.icon.skype

extracted_from_files

detected Domain: i.icon.shipping.fast

XIOC detected Domain: i.icon.shipping.fast

extracted_from_files

Domain

detected Domain: i.icon.search.plus

XIOC detected Domain: i.icon.search.plus

extracted_from_files

Domain

detected Domain: i.icon.search

XIOC detected Domain: i.icon.search

extracted_from_files

Domain

detected Domain: i.icon.save

XIOC detected Domain: i.icon.save

extracted_from_files

Domain

detected Domain: i.icon.question.circle

XIOC detected Domain: i.icon.question.circle

extracted_from_files

Domain

detected Domain: i.icon.power.off

XIOC detected Domain: i.icon.power.off

extracted_from_files

Domain

detected Domain: i.icon.taxi

XIOC detected Domain: i.icon.taxi

extracted_from_files

Domain

detected Domain: i.icon.table.tennis

XIOC detected Domain: i.icon.table.tennis

extracted_from_files

Domain

detected Domain: i.icon.stumbleupon.circle

XIOC detected Domain: i.icon.stumbleupon.circle

extracted_from_files

Domain

detected Domain: i.icon.stop.circle

XIOC detected Domain: i.icon.stop.circle

extracted_from_files

Domain

detected Domain: i.icon.star

XIOC detected Domain: i.icon.star

extracted_from_files

Domain

detected Domain: i.icon.stack.exchange

XIOC detected Domain: i.icon.stack.exchange

extracted_from_files

Domain

detected Domain: i.icon.smile

XIOC detected Domain: i.icon.smile

extracted_from_files

Domain

detected Domain: i.icon.user.circle

XIOC detected Domain: i.icon.user.circle

extracted_from_files

Domain

detected Domain: i.icon.university

XIOC detected Domain: i.icon.university

extracted_from_files

Domain

detected Domain: i.icon.tv

XIOC detected Domain: i.icon.tv

extracted_from_files

Domain

detected Domain: i.icon.toggle.off

XIOC detected Domain: i.icon.toggle.off

extracted_from_files

Domain

detected Domain: i.icon.times.circle

XIOC detected Domain: i.icon.times.circle

extracted_from_files

Domain

detected Domain: i.icon.th

XIOC detected Domain: i.icon.th

extracted_from_files

Domain

detected Domain: i.icon.tencent.weibo

XIOC detected Domain: i.icon.tencent.weibo

extracted_from_files

Domain

detected Domain: i.icon.xbox

XIOC detected Domain: i.icon.xbox

extracted_from_files

Domain

detected Domain: i.icon.windows

XIOC detected Domain: i.icon.windows

extracted_from_files

Domain

detected Domain: i.icon.weibo

XIOC detected Domain: i.icon.weibo

extracted_from_files

Domain

detected Domain: i.icon.volume.off

XIOC detected Domain: i.icon.volume.off

extracted_from_files

Domain

detected Domain: i.icon.video

XIOC detected Domain: i.icon.video

extracted_from_files

Domain

detected Domain: i.icon.user.plus

XIOC detected Domain: i.icon.user.plus

extracted_from_files

Domain

detected Domain: i.icon.user.md

XIOC detected Domain: i.icon.user.md

extracted_from_files

Domain

detected Domain: i.icon.credit.card.american.express

XIOC detected Domain: i.icon.credit.card.american.express

extracted_from_files

Domain

detected Domain: i.icon.credit.card.amazon.pay

XIOC detected Domain: i.icon.credit.card.amazon.pay

extracted_from_files

Domain

detected Domain: i.icon.user.doctor

XIOC detected Domain: i.icon.user.doctor

extracted_from_files

Domain

detected Domain: i.icon.youtube

XIOC detected Domain: i.icon.youtube

extracted_from_files

Domain

detected Domain: i.icon.yandex.international

XIOC detected Domain: i.icon.yandex.international

extracted_from_files

Domain

detected Domain: i.icon.yandex

XIOC detected Domain: i.icon.yandex

extracted_from_files

Domain

detected Domain: i.icon.yahoo

XIOC detected Domain: i.icon.yahoo

extracted_from_files

Domain

detected Domain: i.icon.amex

XIOC detected Domain: i.icon.amex

extracted_from_files

Domain

detected Domain: i.icon.american.express

XIOC detected Domain: i.icon.american.express

extracted_from_files

Domain

detected Domain: i.icon.add.circle

XIOC detected Domain: i.icon.add.circle

extracted_from_files

Domain

detected Domain: i.icon.credit.card.visa

XIOC detected Domain: i.icon.credit.card.visa

extracted_from_files

Domain

detected Domain: i.icon.credit.card.jcb

XIOC detected Domain: i.icon.credit.card.jcb

extracted_from_files

Domain

detected Domain: i.icon.credit.card.discover

XIOC detected Domain: i.icon.credit.card.discover

extracted_from_files

Domain

detected Domain: i.icon.credit.card.diners.club

XIOC detected Domain: i.icon.credit.card.diners.club

extracted_from_files

Domain

detected Domain: i.icon.computer

XIOC detected Domain: i.icon.computer

extracted_from_files

Domain

detected Domain: i.icon.chat

XIOC detected Domain: i.icon.chat

extracted_from_files

Domain

detected Domain: i.icon.cc

XIOC detected Domain: i.icon.cc

extracted_from_files

Domain

detected Domain: i.icon.call

XIOC detected Domain: i.icon.call

extracted_from_files

Domain

detected Domain: i.icon.battery.zero

XIOC detected Domain: i.icon.battery.zero

extracted_from_files

Domain

detected Domain: i.icon.battery.one

XIOC detected Domain: i.icon.battery.one

extracted_from_files

Domain

detected Domain: i.icon.bar

XIOC detected Domain: i.icon.bar

extracted_from_files

Domain

detected Domain: i.icon.google.plus.circle

XIOC detected Domain: i.icon.google.plus.circle

extracted_from_files

Domain

detected Domain: i.icon.gay

XIOC detected Domain: i.icon.gay

extracted_from_files

Domain

detected Domain: i.icon.game

XIOC detected Domain: i.icon.game

extracted_from_files

Domain

detected Domain: i.icon.envira.gallery

XIOC detected Domain: i.icon.envira.gallery

extracted_from_files

Domain

detected Domain: i.icon.doctor

XIOC detected Domain: i.icon.doctor

extracted_from_files

Domain

detected Domain: i.icon.discover

XIOC detected Domain: i.icon.discover

extracted_from_files

Domain

detected Domain: i.icon.diners.club

XIOC detected Domain: i.icon.diners.club

extracted_from_files

Domain

detected Domain: i.icon.legal

XIOC detected Domain: i.icon.legal

extracted_from_files

Domain

detected Domain: i.icon.law

XIOC detected Domain: i.icon.law

extracted_from_files

Domain

detected Domain: i.icon.jcb

XIOC detected Domain: i.icon.jcb

extracted_from_files

Domain

detected Domain: i.icon.hourglass.one

XIOC detected Domain: i.icon.hourglass.one

extracted_from_files

Domain

detected Domain: i.icon.help

XIOC detected Domain: i.icon.help

extracted_from_files

Domain

detected Domain: i.icon.help.circle

XIOC detected Domain: i.icon.help.circle

extracted_from_files

Domain

detected Domain: i.icon.group

XIOC detected Domain: i.icon.group

extracted_from_files

Domain

detected Domain: i.icon.selected.radio

XIOC detected Domain: i.icon.selected.radio

extracted_from_files

Domain

detected Domain: i.icon.remove.circle

XIOC detected Domain: i.icon.remove.circle

extracted_from_files

Domain

detected Domain: i.icon.r.circle

XIOC detected Domain: i.icon.r.circle

extracted_from_files

Domain

detected Domain: i.icon.pin

XIOC detected Domain: i.icon.pin

extracted_from_files

Domain

detected Domain: i.icon.photo

XIOC detected Domain: i.icon.photo

extracted_from_files

Domain

detected Domain: i.icon.man

XIOC detected Domain: i.icon.man

extracted_from_files

Domain

detected Domain: i.icon.like

XIOC detected Domain: i.icon.like

extracted_from_files

URL

detected URL: https://fontawesome.com/license

XIOC detected URL: https://fontawesome.com/license

extracted_from_files

URL

detected URL: http://fontawesome.io

XIOC detected URL: http://fontawesome.io

extracted_from_files

detected IP: 3.86.137.112

XIOC detected IP: 3.86.137.112

extracted_from_files

Domain

detected Domain: i.icon.target

XIOC detected Domain: i.icon.target

extracted_from_files

Domain

detected Domain: i.icon.talk

XIOC detected Domain: i.icon.talk

extracted_from_files

Domain

detected Domain: i.icon.soccer

XIOC detected Domain: i.icon.soccer

extracted_from_files

Domain

detected Domain: i.icon.shop

XIOC detected Domain: i.icon.shop

extracted_from_files

Domain

detected Domain: i.icon.zoom.in

XIOC detected Domain: i.icon.zoom.in

extracted_from_files

detected Domain: i.icon.zip

XIOC detected Domain: i.icon.zip

extracted_from_files

Domain

detected Domain: i.icon.world

XIOC detected Domain: i.icon.world

extracted_from_files

Domain

detected Domain: i.icon.warning.circle

XIOC detected Domain: i.icon.warning.circle

extracted_from_files

Domain

detected Domain: i.icon.volume.control.phone

XIOC detected Domain: i.icon.volume.control.phone

extracted_from_files

Domain

detected Domain: i.icon.visa

XIOC detected Domain: i.icon.visa

extracted_from_files

Domain

detected Domain: i.icon.video.play

XIOC detected Domain: i.icon.video.play

extracted_from_files

Domain

detected Domain: i.icon.radio

XIOC detected Domain: i.icon.radio

extracted_from_files

Domain

detected Domain: i.icon.money

XIOC detected Domain: i.icon.money

extracted_from_files

Domain

detected Domain: i.icon.hourglass.zero

XIOC detected Domain: i.icon.hourglass.zero

extracted_from_files

Domain

detected Domain: i.icon.food

XIOC detected Domain: i.icon.food

extracted_from_files

Domain

detected Domain: i.icon.exchange

XIOC detected Domain: i.icon.exchange

extracted_from_files

Domain

detected Domain: i.icon.cloud.download

XIOC detected Domain: i.icon.cloud.download

extracted_from_files

Domain

detected Domain: i.icon.checkmark.box

XIOC detected Domain: i.icon.checkmark.box

extracted_from_files

URL

detected URL: https://licenses.sceptermarketing.com/activecampaign/createContact

XIOC detected URL: https://licenses.sceptermarketing.com/activecampaign/createContact

extracted_from_files

URL

detected URL: https://www.amazon.$

XIOC detected URL: https://www.amazon.$

extracted_from_files

Other

detected Email: [email protected]

XIOC detected Email: [email protected]

extracted_from_files

Other

detected Email: [email protected]

XIOC detected Email: [email protected]

extracted_from_files

Other

detected Email: [email protected]

XIOC detected Email: [email protected]

extracted_from_files

Domain

detected Domain: i.icon.youtube.play

XIOC detected Domain: i.icon.youtube.play

extracted_from_files

Domain

detected Domain: i.icon.sign.in

XIOC detected Domain: i.icon.sign.in

extracted_from_files

URL

detected URL: https://www.amazon.ca/progress-tracker/package/*

XIOC detected URL: https://www.amazon.ca/progress-tracker/package/*

extracted_from_files

URL

detected URL: https://www.amazon.ca/gp/your-account/order-history/*

XIOC detected URL: https://www.amazon.ca/gp/your-account/order-history/*

extracted_from_files

URL

detected URL: https://www.amazon.it/progress-tracker/package/*

XIOC detected URL: https://www.amazon.it/progress-tracker/package/*

extracted_from_files

URL

detected URL: https://www.amazon.it/gp/your-account/order-history/*

XIOC detected URL: https://www.amazon.it/gp/your-account/order-history/*

extracted_from_files

URL

detected URL: https://www.amazon.com/progress-tracker/package/*

XIOC detected URL: https://www.amazon.com/progress-tracker/package/*

extracted_from_files

URL

detected URL: https://www.amazon.com/gp/your-account/order-history/*

XIOC detected URL: https://www.amazon.com/gp/your-account/order-history/*

extracted_from_files

URL

detected URL: https://www.amazon.com'

XIOC detected URL: https://www.amazon.com'

extracted_from_files

URL

detected URL: https://connectorange.io/order/order_update/edit_tracking_detail

XIOC detected URL: https://connectorange.io/order/order_update/edit_tracking_detail

extracted_from_files

URL

detected URL: https://connectorange.io/order/order_update/get_tracking_modal

XIOC detected URL: https://connectorange.io/order/order_update/get_tracking_modal

extracted_from_files

URL

detected URL: https://connectorange.io/order/1

XIOC detected URL: https://connectorange.io/order/1

extracted_from_files

URL

detected URL: https://connectorange.io/).'

XIOC detected URL: https://connectorange.io/).'

extracted_from_files

URL

detected URL: https://connectorange.io/bluecare_express_tool/bluecare_express_request',

XIOC detected URL: https://connectorange.io/bluecare_express_tool/bluecare_express_request',

extracted_from_files

URL

detected URL: https://bluecare.express/api/AddInfo2

XIOC detected URL: https://bluecare.express/api/AddInfo2

extracted_from_files

URL

detected URL: https://www.bluecare.express/api/AddInfo

XIOC detected URL: https://www.bluecare.express/api/AddInfo

extracted_from_files

URL

detected URL: https://www.amazon.ca/gp/your-account/order-history*

XIOC detected URL: https://www.amazon.ca/gp/your-account/order-history*

extracted_from_files

URL

detected URL: https://www.amazon.it/gp/your-account/order-history*

XIOC detected URL: https://www.amazon.it/gp/your-account/order-history*

extracted_from_files

URL

detected URL: https://www.amazon.com/gp/your-account/order-history*

XIOC detected URL: https://www.amazon.com/gp/your-account/order-history*

extracted_from_files

URL

detected URL: https://clients2.google.com/service/update2/crx

XIOC detected URL: https://clients2.google.com/service/update2/crx

extracted_from_files

URL

detected URL: http://www.w3.org/2000/svg

XIOC detected URL: http://www.w3.org/2000/svg

extracted_from_files

URL

detected URL: https://www.amazon.ca/*

XIOC detected URL: https://www.amazon.ca/*

extracted_from_files

URL

detected URL: https://www.amazon.it/*

XIOC detected URL: https://www.amazon.it/*

extracted_from_files

URL

detected URL: https://www.amazon.com/*

XIOC detected URL: https://www.amazon.com/*

extracted_from_files

URL

detected URL: https://connectorange.io/*

XIOC detected URL: https://connectorange.io/*

extracted_from_files

URL

detected URL: http://3.86.137.112/*

XIOC detected URL: http://3.86.137.112/*

extracted_from_files

URL

detected URL: https://$

XIOC detected URL: https://$

extracted_from_files

URL

detected URL: http://3.86.137.112:3000/licensing/license

XIOC detected URL: http://3.86.137.112:3000/licensing/license

extracted_from_files

URL

detected URL: https://bceamzl.ecomcircles.com/home

XIOC detected URL: https://bceamzl.ecomcircles.com/home

extracted_from_files

URL

detected URL: http://3.86.137.112:3000/licensing/authorize

XIOC detected URL: http://3.86.137.112:3000/licensing/authorize

extracted_from_files

URL

detected URL: https://licenses.sceptermarketing.com/activecampaign/addTagToContact

XIOC detected URL: https://licenses.sceptermarketing.com/activecampaign/addTagToContact

extracted_from_files

URL

detected URL: https://licenses.sceptermarketing.com/activecampaign/deleteDeal

XIOC detected URL: https://licenses.sceptermarketing.com/activecampaign/deleteDeal

extracted_from_files

URL

detected URL: http://opensource.org/licenses/MIT

XIOC detected URL: http://opensource.org/licenses/MIT

extracted_from_files

URL

detected URL: http://github.com/semantic-org/semantic-ui/

XIOC detected URL: http://github.com/semantic-org/semantic-ui/

extracted_from_files

URL

detected URL: https://connectorange.io/'

XIOC detected URL: https://connectorange.io/'

extracted_from_files

URL

detected URL: http://www.w3.org/1999/xlink

XIOC detected URL: http://www.w3.org/1999/xlink

extracted_from_files

Domain

detected Domain: i.icon.video.camera

XIOC detected Domain: i.icon.video.camera

extracted_from_files

Domain

detected Domain: i.icon.travel

XIOC detected Domain: i.icon.travel

extracted_from_files

Domain

detected Domain: fontawesome.io

XIOC detected Domain: fontawesome.io

extracted_from_files

Domain

detected Domain: i.icon.tm

XIOC detected Domain: i.icon.tm

extracted_from_files

Security Analysis Summary

Security Analysis Overview

Dropship Tracking and TBA Conversion is a Chrome Web Store extension published by [email protected]. Version 3.3 has been analyzed by the Risky Plugins security platform, receiving a risk score of 56.9/100 (MEDIUM risk) based on 336 security findings.

Risk Assessment

This extension presents moderate security risk. Several findings were detected that may warrant attention. Users should carefully review the permissions and findings before installation.

Findings Breakdown

High: 38 finding(s)
Medium: 298 finding(s)

What Was Analyzed

The security assessment covers multiple analysis categories:

Malware Detection: YARA rule matching against 2,400+ malware signatures
Secret Detection: Scanning for exposed API keys, tokens, and credentials
Static Analysis: Code-level security analysis for common vulnerability patterns
Network Analysis: Detection of suspicious network communications and endpoints
Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

Dropship Tracking and TBA Conversion is published by [email protected] on the Chrome Web Store marketplace. The extension has approximately 173 users.

Recommendation

Exercise caution with this extension. Review the detailed findings and ensure the requested permissions align with the extension's stated functionality before installation.

Source Code Viewer

Source Code Not Available

Source code is not available for this version of the extension.

Frequently Asked Questions

Similar Extensions

Related extensions from the same publisher or marketplace

EC Seller Tools

[email protected]

CRITICAL 1K users

Walmart WFS Profit Calculator

[email protected]

MINIMAL 3K users

ChromeCompare

[email protected]

CRITICAL 14 users

Cover-Letter-AI

[email protected]

CRITICAL

SensePage

[email protected]

CRITICAL

SVG to AVIF Converter [ShiftShift]

[email protected]

CRITICAL 4 users

Risk Assessment

Severity Breakdown

Finding Categories

YARA Rules Matched

Requested Permissions

About This Extension

Detailed Findings

NET-FETCH-background/library.js-333

NET-FETCH-popup/popup.js-215

NET-FETCH-popup/popup.js-161

NET-FETCH-background/library.js-252

NET-FETCH-background/library.js-302

NET-FETCH-scripts/trigger.js-29

NET-FETCH-background/background.js-29

NET-FETCH-background/library.js-233

NET-FETCH-scripts/trigger.js-63

NET-FETCH-popup/popup.js-179

NET-FETCH-background/library.js-323

NET-FETCH-background/library.js-345

NET-FETCH-scripts/submitter.js-137

NET-FETCH-popup/popup.js-240

NET-FETCH-popup/popup.js-198

YARA Rule Matches

postinstall file download

postinstall obfuscation

postinstall network communication

postinstall persistence mechanism

postinstall file manipulation

credential skype data

postinstall system command

postinstall crypto operations

NoUseWeakRandom

credential env files

credential steam data

postinstall registry modification

Indicators of Compromise

All Indicators · 275

Security Analysis Summary

Security Analysis Overview

Risk Assessment

Findings Breakdown

What Was Analyzed

Developer Information

Recommendation

Frequently Asked Questions

Similar Extensions

EC Seller Tools

Walmart WFS Profit Calculator

ChromeCompare

Cover-Letter-AI

SensePage

SVG to AVIF Converter [ShiftShift]