Is MyCoub - скачать с coub видео/аудио safe?
MyCoub loads a remote stylesheet on Coub pages and can send captured video frames to Yandex Images.
On each Coub page, its content script adds a stylesheet from mycoub.ru, causing a request that can include browser metadata such as the page referrer and IP address. When the user runs its search-by-frame feature, it captures a JPEG frame from the Coub video and posts it to Yandex Images before opening the matching image-search result.
Who publishes itCreator's room - no other listings under this identity, 1 shared hostname
Creator's room - no other listings under this identity, 1 shared hostname
What this publisher told the store about itself, and the other listings that told it the same thing.
Shared hosts - 1 hostname
Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Findings
MyCoub loads a remote stylesheet from mycoub.ru on every Coub page visit
Every Coub page you open makes your browser request a stylesheet from mycoub.ru.
We observed this happen automatically, before any extension button is clicked, exposing the coub.com URL you visited and your IP address.
- Severity
- Medium unwanted
- Type
- Unexpected
- CWE
- CWE-359
- Source
- Dynamic sandbox
You open any coub.com page with the extension installed.
The content script injects a stylesheet link pointing at mycoub.ru, causing the browser to request it automatically.
200 OK stylesheet response. Observed during dynamic analysis on ordinary navigation to coub.com, with no popup or extension UI interaction; the request's initiator was the extension's own content script.
- Page you were viewinghttps://coub.com/view/2y3x4z (illustrative)
Standard browser Referer headers on the stylesheet request can include the coub.com URL you had open.
- Your IP address203.0.113.42 (illustrative)
Any network request reveals the IP address it was sent from, which mycoub.ru's server can log.
Where the request is built
Unminified equivalent
if (window.location.href.includes('://coub.com')) { waitForHeadElement(() => { const link = document.createElement('link'); link.rel = 'stylesheet'; link.href = `https://mycoub.ru/web/css/extension.css?v=${dayOfWeek()}`; document.head.appendChild(link); });}- mycoub.ru
Receives an automatic stylesheet request on every Coub page load, exposing the visited URL (via Referer) and IP address; operated under the extension's own MyCoub brand.
What it can do
Permissions this extension asks for, as declared in version 2.5.2. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to. The current listed version is 2.6.0, which we have not unpacked yet.
Read and change your data on every site you visit
<all_urls>
See the address and title of every tab you have open
tabs
Store data in your browser
storage
Start, monitor and manage your downloads
downloads
Store an unlimited amount of data in your browser
unlimitedStorage
Where it sends data
Destinations our analysis observed MyCoub - скачать с coub видео/аудио contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- yandex.ru
MyCoub - скачать с coub видео/аудио sends data to yandex.ru. 10 other extensions we have analysed send data here.
- mycoub.ru
MyCoub - скачать с coub видео/аудио sends data to mycoub.ru. No other extension we have analysed sends data here.