[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

Privacy Test

Version 10.7 View in Chrome Web Store

Last scanned: about 14 hours ago

Extension Details

Developer: https://www.hotcleaner.com/

Rating: 4.7 ★ (15.8K ratings)

Users: 400,000

Context-Aware Verdict

HIGH

Overall Risk

Based on 4 total findings, including 2 high-risk findings.

Findings

HIGH

High-Risk Permission: management

This extension has the management permission. Can manage other extensions. This could potentially be used maliciously to compromise security or privacy.

HIGH

High-Risk Permission: privacy

This extension has the privacy permission. Can modify privacy settings. This could potentially be used maliciously to compromise security or privacy.

MEDIUM

Medium-Risk Permission: activeTab

This extension has the activeTab permission. Can access the active tab when clicking the extension icon.

MEDIUM

Medium-Risk Permission: storage

This extension has the storage permission. Can store data locally.

Security Analysis Details

Required Permissions:

activeTab
management
privacy
scripting
storage

Content Security Policy:

extension_pages: default-src 'self';img-src 'self' https: chrome://extension-icon;connect-src https:;report-uri https://appn.center/apiv1/csp;

Embedded URLs (25 total):

http://www.w3.org/2000/svg	http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd
http://www.w3.org/1999/xlink	http://www.serif.com/
https://scan32.com/scan	https://api64.com/sb3
https://dns.google/resolve?type=	https://scan32.com/cip
https://api64.com/cip	https://www.hotcleaner.com/clickclean-app.html
https://chromewebstore.google.com/detail/	https://www.hotcleaner.com/privacy-test-extension-policy.html
https://www.hotcleaner.com/security-and-privacy-software-feedback.html	https://www.hotcleaner.com/privacy-test-quick-start-guide.html
https://www.hotcleaner.com/support-click-and-clean-development.html	https://www.google.com/search?tbm=isch&q=site%3
https://builtwith.com/?url=	https://sitecheck.sucuri.net/results/
https://ipinfo.io/	https://chromewebstore.google.com/
https://appn.center/apiv1/csp	https://www.hotcleaner.com/
https://clients2.google.com/service/update2/crx	https://www.hotcleaner.com/privacy-test-updated.html
https://www.hotcleaner.com/security-and-privacy-software-feedback.html#ptu17

Raw Manifest

{
  "name": "__MSG_extName__",
  "icons": {
    "16": "DIR_IMG/g16.png",
    "19": "DIR_IMG/g19.png",
    "32": "DIR_IMG/g32.png",
    "38": "DIR_IMG/g38.png",
    "40": "DIR_IMG/g40.png",
    "48": "DIR_IMG/g48.png",
    "64": "DIR_IMG/g64.png",
    "96": "DIR_IMG/g96.png",
    "128": "DIR_IMG/g128.png"
  },
  "action": {
    "default_icon": "DIR_IMG/g19.png",
    "default_popup": "MENU_HTML_ID.html",
    "default_title": "__MSG_extName__"
  },
  "version": "10.7",
  "background": {
    "service_worker": "SW_JS_ID.js"
  },
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "__MSG_extDesc__",
  "permissions": [
    "activeTab",
    "management",
    "privacy",
    "scripting",
    "storage"
  ],
  "default_locale": "en",
  "offline_enabled": true,
  "host_permissions": [],
  "manifest_version": 3,
  "externally_connectable": {
    "ids": [
      "ghgabhipcejejjmhhchfonmamedcbeod"
    ],
    "matches": [
      "https://www.hotcleaner.com/*"
    ]
  },
  "minimum_chrome_version": "110.0",
  "content_security_policy": {
    "extension_pages": "default-src 'self';img-src 'self' https: chrome://extension-icon;connect-src https:;report-uri https://appn.center/apiv1/csp;"
  }
}

by ✦ Astarte

Privacy Test

Extension Details

Context-Aware Verdict

Findings

Security Analysis Details

Required Permissions:

Content Security Policy:

Embedded URLs (25 total):

Raw Manifest

Detections

Manifest Findings