[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

RoRegion – Reduce Lag, Ping & Boost FPS: Roblox Region Selector

Version 10 View in Chrome Web Store

Last scanned: about 16 hours ago

Extension Details

Developer: roregion.com

Rating: 4.5 ★ (1.9K ratings)

Users: 50,000

Context-Aware Verdict

MEDIUM

Overall Risk

Trust Factors:

The extension has a solid user base of 50,000 users with a strong 4.5-star rating from nearly 2,000 reviews, indicating general user satisfaction. The specific focus on Roblox region selection for gaming performance optimization is a legitimate use case that many gamers would find valuable. The developer maintains a dedicated website (roregion.com) which adds some credibility.

Concerns:

The primary concern is the broad host permissions for all Roblox domains (*://*.roblox.com/*), which while appropriate for its stated function, could potentially access sensitive account information or game data. The declarativeNetRequest permission allows network request modification, which is necessary for region switching but could theoretically be misused. The storage permission enables local data retention, though this appears necessary for saving user preferences.

The security analysis flagged the broad host permissions as high-risk, which is warranted given the extension's ability to access all Roblox-related pages and potentially intercept or modify network traffic.

Recommendations:

This extension appears legitimate for its intended gaming performance purpose. Users should ensure they download it only from the official Chrome Web Store and monitor for any unusual behavior. Consider using it in a separate Chrome profile if you're particularly security-conscious, especially given the broad Roblox access permissions. Regularly review what data the extension might be storing locally.

Findings

HIGH

Broad Host Permissions

This extension has broad host permissions allowing it to access many or all websites. This could potentially be used to steal sensitive data or track browsing activity.

MEDIUM

Medium-Risk Permission: storage

This extension has the storage permission. Can store data locally.

Security Analysis Details

Required Permissions:

declarativeNetRequest
storage
scripting

Host Permissions:

*://*.roblox.com/*

Embedded URLs (18 total):

https://gamejoin.roblox.com/v1/join-game-instance	https://locale.roblox.com/v1/locales/user-localization-locus-supported-locales
https://apis.roblox.com/user-settings-api/v1/user-settings	https://roearn.io
https://games.roblox.com/v1/games/	https://auth.roblox.com/v2/logout
https://www.roblox.com/games/	https://www.roblox.com
https://thumbnails.roblox.com/v1/batch	http://www.w3.org/2000/svg
https://reddit.com/submit?url=	https://roregion.com/
https://twitter.com/intent/tweet?url=	https://www.facebook.com/sharer/sharer.php?u=
https://wa.me/?text=https://roregion.com?utm_source=item-share-whatsapp	https://chromewebstore.google.com/detail/kholpglpladobppelhcjjjlckjplkgan/reviews
https://tr.rbxcdn.com/53eb9b17fe1432a809c73a13889b5006/150/150/Image/Png	https://clients2.google.com/service/update2/crx

Raw Manifest

{
  "name": "__MSG_name__",
  "icons": {
    "16": "icons/icon-16.png",
    "48": "icons/icon-48.png",
    "128": "icons/icon-128.png"
  },
  "version": "10",
  "background": {
    "service_worker": "background.js"
  },
  "short_name": "RoRegion",
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "__MSG_description__",
  "permissions": [
    "declarativeNetRequest",
    "storage",
    "scripting"
  ],
  "default_locale": "en",
  "content_scripts": [
    {
      "js": [
        "regionSelector.js"
      ],
      "run_at": "document_end",
      "matches": [
        "*://*.roblox.com/*"
      ],
      "all_frames": true
    }
  ],
  "host_permissions": [
    "*://*.roblox.com/*"
  ],
  "manifest_version": 3,
  "declarative_net_request": {
    "rule_resources": [
      {
        "id": "ruleset_1",
        "path": "json/rules.json",
        "enabled": true
      },
      {
        "id": "ruleset_2",
        "path": "json/regionRules.json",
        "enabled": false
      }
    ]
  },
  "web_accessible_resources": [
    {
      "matches": [
        "*://*.roblox.com/*"
      ],
      "resources": [
        "regionSelector.js",
        "json/regionList.json",
        "json/countries.json",
        "icons/*.png"
      ]
    }
  ]
}

by ✦ Astarte