Threat Database Potentially Unwanted Programs Coupon Simplified Chrome Extension

Coupon Simplified Chrome Extension

Threat Scorecard

Ranking: 5,891
Threat Level: 50 % (Medium)
Infected Computers: 3,356
First Seen: January 18, 2017
Last Seen: September 7, 2023
OS(es) Affected: Windows

The Coupon Simplified Chrome Extension is promoted via software packages as an excellent tool to help you find coupons, limited time deals, discounts on online stores, as well as brick-and-mortar stores in your vicinity. The Coupon Simplified Chrome Extension is a program developed by Polarity Technologies Ltd., which is a company known for registering redirect gateways and publishing new tab page replacement extensions. The Coupon Simplified Chrome Extension is perceived to be a rather modified version of the Classifieds Easy Extension by the same company. Both apps offer a customized new tab page, which functions as a redirect-gateway to resources on Couponsimplified.com, Retailmenot.com and Groupon.com. The primary purpose of the Coupon Simplified Chrome Extension is to change your default new tab to h[tt]p://search.hcouponsimplified[.]com and provide you with tailor-suited ads by sponsors. The advertisements loaded by Coupon Simplified are modeled after your online activities. The app is known to read the user's browsing history, record the input on h[tt]p://search.hcouponsimplified[.]com and scan the browser for installed extensions, themes and Web apps.

Computer security analysts deem the Coupon Simplified Chrome Extension as a Potentially Unwanted Program (PUP) by Polarity Technologies Ltd. that alters your new tab page and divert the Web traffic to h[tt]ps://search.yahoo[.]com/yhs/search?hspart=adk&hsimp=yhs-adk_sbyhp&p=[SEARCH TERM]. The URL mentioned before hosts a customized version of Yahoo, which may not generate the same results as the original Yahoo engine. Polarity is well-known for using the Yahoo services in their new tab page replacements. Examples of that are the Search.dailybibleverses.co, the Careerjobsearch.co and many others. You may be interested to know that Coupon Simplified Chrome Extension has a clone, which we discovered by looking up the 50.17.215.91 IP address associated with h[tt]p://search.hcouponsimplified[.]com. One of the clones created after releasing the Classifieds Easy appears to be a browser extension named "Easy Coupon Access" that is designed to load h[tt]p://search.heasycouponsaccess[.]com/, which is a replica of h[tt]p://search.hcouponsimplified[.]com. PC users who are not comfortable with the targeted commercials materials by Polarity and its practices may find that AV engines flag related files and Registry keys as:

  • Adware ( 00518f651 )
  • Adware.Agent.Win32.136143
  • Adware.Downware.18374
  • HEUR:Trojan.Win32.StartPage
  • StartPage-FAM
  • Trojan.StartPage!ueiUXNQLc7w
  • Trojan.StartPage.cmx
  • Trojan.Win32.Generic!BT
  • a variant of Win32/Adware.Agent.NSS

URLs

Coupon Simplified Chrome Extension may call the following URLs:

https://query.hcouponsimplified.com/s?uid=
search.couponsimplified.com

Trending

Most Viewed

Loading...