Is Youtube dislike extension safe?

High risk

YouDisLike is high risk. Each time you open a new tab, the extension gets or makes a persistent ID from local storage, sends it to trrrrk.click, a Matomo endpoint tagged 'user_presence', at most once daily. The listing describes a dislike counter; undisclosed.…

TubeVote Devv5.0.4Chrome Web Store
75Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Findings

SeverityHIGH
ClassUNWANTED
TypeUnexpected
CWECWE-359
SourceAI SANDBOX

Persistent User ID Transmitted to trrrrk.click on Tab Open

Each time you open a new tab, the extension gets or makes a persistent ID from local storage, sends it to trrrrk.click, a Matomo endpoint tagged 'user_presence', at most once daily.

The listing describes a dislike counter; undisclosed.

01EvidenceCAUSE EFFECT
What actually happens
You did this

You open a new browser tab.

The extension did this

The extension retrieves or creates a permanent random identifier and sends it to trrrrk.click, at most once every 24 hours.

No interaction with YouTube is required, the beacon fires on any new tab, including blank tabs.

02EvidenceFIELD TABLE
What the extension sends to trrrrk.click:
FieldValueWhy it matters
Your persistent install ID
a3f92b1c7e4d0582A random hex string generated once and stored permanently in local storage, letting the server link every future beacon to your install.
Event category
user_presenceHardcoded label 'user_presence' sent with every beacon.
Event action
service_workerHardcoded label 'service_worker', identifies the origin as the background process.
Site ID
4Hardcoded value '4' identifying this extension's analytics property on the trrrrk.click Matomo instance.
Extension URL
chrome-extension://lcdlignfoefnkcfejmlnegoobondbfjb/The chrome-extension:// URL of the extension, derived from its runtime ID.
03EvidenceSTORAGE DUMP
What's stored on your device

This 16-character hex string is generated once via crypto.getRandomValues, persists for the install's life, and rides every daily beacon.

Locationchrome.storage.local, key 'uniqueUserId'
Contents
a3f92b1c7e4d0582
04EvidenceCODE COMPARE
The code that does this

The beacon logic in the extension's service worker:

What it actually does
ID retrieval / creation
// Reads 'uniqueUserId' from local storage.
// If absent, generates a random 16-char hex string and stores it.
async function getOrCreateUserId() {
  let storedId = await chrome.storage.local.get('uniqueUserId');
  if (storedId['uniqueUserId']) return storedId['uniqueUserId'];
  let newId = generateRandomHex(16);  // crypto.getRandomValues
  await chrome.storage.local.set({ 'uniqueUserId': newId });
  return newId;
}
Tab creation listener — fires daily beacon
chrome.tabs.onCreated.addListener(tab => {
  maybeSendPresence();  // rate-limited to once per 24h
});
05EvidenceNETWORK CAPTURE
Captured request
POSThttps://trrrrk.click/matomo.php
200 OK from Matomo analytics collector at trrrrk.click
Headers
Content-Typeapplication/x-www-form-urlencoded
Body
idsite=4&rec=1&apiv=1&_id=a3f92b1c7e4d0582&action_name=extension&url=chrome-extension%3A%2F%2Flcdlignfoefnkcfejmlnegoobondbfjb%2F&e_c=user_presence&e_a=service_worker&rand=f9c2a1b3
06EvidenceTHIRD PARTY LIST
Where this data goes:
  • trrrrk.click

    Developer-operated Matomo analytics instance. Receives the persistent install ID and presence event on each daily beacon. Not disclosed in the extension's Chrome Web Store listing.

SeverityMEDIUM
ClassUNWANTED
TypeUnexpected
CWECWE-829
SourceAI SANDBOX

Analytics Routed Through Undisclosed Developer-Controlled Domain trrrrk.click

The extension's analytics endpoint is hardcoded as trrrrk.click/matomo.php.

The domain doesn't identify its owner or purpose.

There's no opt-out, no setting to disable it, and no mention in the store listing.

01EvidenceCAUSE EFFECT
What actually happens
You did this

You install the extension or open a new tab after 24 hours.

The extension did this

The extension sends analytics data to trrrrk.click, a domain that does not identify its owner or purpose in its name.

No consent prompt is shown before or after the first request. The destination domain is not mentioned in the Chrome Web Store listing.

02EvidenceCODE COMPARE
The code that does this

Hardcoded analytics endpoint:

What it actually does
// Analytics destination hardcoded — no configuration or opt-out path.
const response = await fetch('https://trrrrk.click/matomo.php', {
  method: 'POST',
  headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
  body: params.toString(),
  signal: abortController.signal
});
03EvidenceTHIRD PARTY LIST
Analytics endpoint:
  • trrrrk.click

    Self-hosted Matomo instance operated by the extension developer. Domain name gives no indication of owner or function. Not referenced in the Chrome Web Store listing.

What it can do

Permissions this extension asks for, as declared in version 5.0.4. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on youtube.com

    *://*.youtube.com/* and 1 more

  • Read and change your data on www.youtube.com

    *://www.youtube.com/*

  • Read and change your data on m.youtube.com

    *://m.youtube.com/*

  • Read and change your data on youtube.ae

    *://youtube.ae/*

  • Read and change your data on www.youtube.ae

    *://www.youtube.ae/*

  • Read and change your data on m.youtube.ae

    *://m.youtube.ae/*

  • Read and change your data on youtube.at

    *://youtube.at/*

  • Read and change your data on www.youtube.at

    *://www.youtube.at/*

  • Read and change your data on m.youtube.at

    *://m.youtube.at/*

  • Read and change your data on youtube.az

    *://youtube.az/*

  • Read and change your data on www.youtube.az

    *://www.youtube.az/*

  • Read and change your data on m.youtube.az

    *://m.youtube.az/*

  • Read and change your data on youtube.ba

    *://youtube.ba/*

  • Read and change your data on www.youtube.ba

    *://www.youtube.ba/*

  • Read and change your data on m.youtube.ba

    *://m.youtube.ba/*

  • Read and change your data on youtube.be

    *://youtube.be/*

  • Read and change your data on www.youtube.be

    *://www.youtube.be/*

  • Read and change your data on m.youtube.be

    *://m.youtube.be/*

  • Read and change your data on youtube.bg

    *://youtube.bg/*

  • Read and change your data on www.youtube.bg

    *://www.youtube.bg/*

  • Read and change your data on m.youtube.bg

    *://m.youtube.bg/*

  • Read and change your data on youtube.bh

    *://youtube.bh/*

  • Read and change your data on www.youtube.bh

    *://www.youtube.bh/*

  • Read and change your data on m.youtube.bh

    *://m.youtube.bh/*

  • Read and change your data on youtube.bo

    *://youtube.bo/*

  • Read and change your data on www.youtube.bo

    *://www.youtube.bo/*

  • Read and change your data on m.youtube.bo

    *://m.youtube.bo/*

  • Read and change your data on youtube.by

    *://youtube.by/*

  • Read and change your data on www.youtube.by

    *://www.youtube.by/*

  • Read and change your data on m.youtube.by

    *://m.youtube.by/*

  • Read and change your data on youtube.ca

    *://youtube.ca/*

  • Read and change your data on www.youtube.ca

    *://www.youtube.ca/*

  • Read and change your data on m.youtube.ca

    *://m.youtube.ca/*

  • Read and change your data on youtube.cat

    *://youtube.cat/*

  • Read and change your data on www.youtube.cat

    *://www.youtube.cat/*

  • Read and change your data on m.youtube.cat

    *://m.youtube.cat/*

  • Read and change your data on youtube.ch

    *://youtube.ch/*

  • Read and change your data on www.youtube.ch

    *://www.youtube.ch/*

  • Read and change your data on m.youtube.ch

    *://m.youtube.ch/*

  • Read and change your data on youtube.cl

    *://youtube.cl/*

  • Read and change your data on www.youtube.cl

    *://www.youtube.cl/*

  • Read and change your data on m.youtube.cl

    *://m.youtube.cl/*

  • Read and change your data on youtube.co

    *://youtube.co/*

  • Read and change your data on www.youtube.co

    *://www.youtube.co/*

  • Read and change your data on m.youtube.co

    *://m.youtube.co/*

  • Read and change your data on youtube.co.ae

    *://youtube.co.ae/*

  • Read and change your data on www.youtube.co.ae

    *://www.youtube.co.ae/*

  • Read and change your data on m.youtube.co.ae

    *://m.youtube.co.ae/*

  • Read and change your data on youtube.co.at

    *://youtube.co.at/*

  • Read and change your data on www.youtube.co.at

    *://www.youtube.co.at/*

  • Read and change your data on m.youtube.co.at

    *://m.youtube.co.at/*

  • Read and change your data on youtube.co.cr

    *://youtube.co.cr/*

  • Read and change your data on www.youtube.co.cr

    *://www.youtube.co.cr/*

  • Read and change your data on m.youtube.co.cr

    *://m.youtube.co.cr/*

  • Read and change your data on youtube.co.hu

    *://youtube.co.hu/*

  • Read and change your data on www.youtube.co.hu

    *://www.youtube.co.hu/*

  • Read and change your data on m.youtube.co.hu

    *://m.youtube.co.hu/*

  • Read and change your data on youtube.co.id

    *://youtube.co.id/*

  • Read and change your data on www.youtube.co.id

    *://www.youtube.co.id/*

  • Read and change your data on m.youtube.co.id

    *://m.youtube.co.id/*

  • Read and change your data on youtube.co.il

    *://youtube.co.il/*

  • Read and change your data on www.youtube.co.il

    *://www.youtube.co.il/*

  • Read and change your data on m.youtube.co.il

    *://m.youtube.co.il/*

  • Read and change your data on youtube.co.in

    *://youtube.co.in/*

  • Read and change your data on www.youtube.co.in

    *://www.youtube.co.in/*

  • Read and change your data on m.youtube.co.in

    *://m.youtube.co.in/*

  • Read and change your data on youtube.co.jp

    *://youtube.co.jp/*

  • Read and change your data on www.youtube.co.jp

    *://www.youtube.co.jp/*

  • Read and change your data on m.youtube.co.jp

    *://m.youtube.co.jp/*

  • Read and change your data on youtube.co.ke

    *://youtube.co.ke/*

  • Read and change your data on www.youtube.co.ke

    *://www.youtube.co.ke/*

  • Read and change your data on m.youtube.co.ke

    *://m.youtube.co.ke/*

  • Read and change your data on youtube.co.kr

    *://youtube.co.kr/*

  • Read and change your data on www.youtube.co.kr

    *://www.youtube.co.kr/*

  • Read and change your data on m.youtube.co.kr

    *://m.youtube.co.kr/*

  • Read and change your data on youtube.co.ma

    *://youtube.co.ma/*

  • Read and change your data on www.youtube.co.ma

    *://www.youtube.co.ma/*

  • Read and change your data on m.youtube.co.ma

    *://m.youtube.co.ma/*

  • Read and change your data on youtube.co.nz

    *://youtube.co.nz/*

  • Read and change your data on www.youtube.co.nz

    *://www.youtube.co.nz/*

  • Read and change your data on m.youtube.co.nz

    *://m.youtube.co.nz/*

  • Read and change your data on youtube.co.th

    *://youtube.co.th/*

  • Read and change your data on www.youtube.co.th

    *://www.youtube.co.th/*

  • Read and change your data on m.youtube.co.th

    *://m.youtube.co.th/*

  • Read and change your data on youtube.co.tz

    *://youtube.co.tz/*

  • Read and change your data on www.youtube.co.tz

    *://www.youtube.co.tz/*

  • Read and change your data on m.youtube.co.tz

    *://m.youtube.co.tz/*

  • Read and change your data on youtube.co.ug

    *://youtube.co.ug/*

  • Read and change your data on www.youtube.co.ug

    *://www.youtube.co.ug/*

  • Read and change your data on m.youtube.co.ug

    *://m.youtube.co.ug/*

  • Read and change your data on youtube.co.uk

    *://youtube.co.uk/*

  • Read and change your data on www.youtube.co.uk

    *://www.youtube.co.uk/*

  • Read and change your data on m.youtube.co.uk

    *://m.youtube.co.uk/*

  • Read and change your data on youtube.co.ve

    *://youtube.co.ve/*

  • Read and change your data on www.youtube.co.ve

    *://www.youtube.co.ve/*

  • Read and change your data on m.youtube.co.ve

    *://m.youtube.co.ve/*

  • Read and change your data on youtube.co.za

    *://youtube.co.za/*

  • Read and change your data on www.youtube.co.za

    *://www.youtube.co.za/*

  • Read and change your data on m.youtube.co.za

    *://m.youtube.co.za/*

  • Read and change your data on youtube.co.zw

    *://youtube.co.zw/*

  • Read and change your data on www.youtube.co.zw

    *://www.youtube.co.zw/*

  • Read and change your data on m.youtube.co.zw

    *://m.youtube.co.zw/*

  • Read and change your data on youtube.com.ar

    *://youtube.com.ar/*

  • Read and change your data on www.youtube.com.ar

    *://www.youtube.com.ar/*

  • Read and change your data on m.youtube.com.ar

    *://m.youtube.com.ar/*

  • Read and change your data on youtube.com.au

    *://youtube.com.au/*

  • Read and change your data on www.youtube.com.au

    *://www.youtube.com.au/*

  • Read and change your data on m.youtube.com.au

    *://m.youtube.com.au/*

  • Read and change your data on youtube.com.az

    *://youtube.com.az/*

  • Read and change your data on www.youtube.com.az

    *://www.youtube.com.az/*

  • Read and change your data on m.youtube.com.az

    *://m.youtube.com.az/*

  • Read and change your data on youtube.com.bd

    *://youtube.com.bd/*

  • Read and change your data on www.youtube.com.bd

    *://www.youtube.com.bd/*

  • Read and change your data on m.youtube.com.bd

    *://m.youtube.com.bd/*

  • Read and change your data on youtube.com.bh

    *://youtube.com.bh/*

  • Read and change your data on www.youtube.com.bh

    *://www.youtube.com.bh/*

  • Read and change your data on m.youtube.com.bh

    *://m.youtube.com.bh/*

  • Read and change your data on youtube.com.bo

    *://youtube.com.bo/*

  • Read and change your data on www.youtube.com.bo

    *://www.youtube.com.bo/*

  • Store data in your browser

    storage

  • Run its own code inside the pages you visit

    scripting

  • Schedule its own background tasks

    alarms

Updated 30 September 2026lcdlignfoefnkcfejmlnegoobondbfjb