CRXaminer

[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

Last scanned: about 8 hours ago

Extension Details

Context-Aware Verdict

MEDIUM

Overall Risk

Trust Factors:

The extension lacks critical identifying information including name, description, author details, user count, and ratings, making it impossible to assess developer credibility or community trust. This absence of basic metadata is concerning and suggests either an incomplete listing or potentially suspicious origins.

Concerns:

- Missing essential extension metadata raises red flags about legitimacy

- Tabs permission allows extensive browser manipulation capabilities including reading URLs, titles, and controlling tab behavior across all websites

- Content scripts run on all HTTP/HTTPS sites, providing broad access to web page content

- Storage permission enables persistent data collection and retention

- The combination of tabs access with universal content scripts creates significant privacy and security exposure

- No visible developer information prevents verification of trustworthiness

- Unknown user base and rating history provide no community validation

Recommendations:

Given the missing metadata and powerful permissions, exercise extreme caution. Consider running this extension in a separate Chrome profile to isolate potential risks from your main browsing environment. Before installation, try to verify the extension's source and purpose through official channels. Monitor your browsing behavior for any unusual activity if you choose to install it. The broad permissions combined with lack of transparency suggest this extension could access sensitive browsing data across all websites you visit.

Findings

HIGH

High-Risk Permission: tabs

This extension has the tabs permission. Can access browser tab information and manipulate tabs. This could potentially be used maliciously to compromise security or privacy.

MEDIUM

Medium-Risk Permission: storage

This extension has the storage permission. Can store data locally.

Security Analysis Details

Required Permissions:

tabs
storage

Embedded URLs (26570 total):

https://clients2.google.com/service/update2/crx	https://123importados.com
https://123multiofertas.com.br	https://123multiofertas.net
https://Acessivelmodasbras.com.br	https://agachecomercial.net
https://allprinter.com.br	https://ascarishop.com
https://bmjbaby.com.br	https://boavistaacabamentos.com
https://boticamaviris.com.br	https://brasilmagazine.com
https://brezzy.com.br	https://caixamisteriosa.com
https://casadonatebrasil.com	https://casakith.com.br
https://casamagazinebrasil.com	https://centroofertas.com.br
https://Cintosbyhi.com.br	https://cogumeloshop.com
https://comandantedasofertas.com	https://compufree.com.br
https://dbellestore.com	https://Descontosbrasileiro.com
https://drogariamc.com.br	https://dutrametais.com
https://equipamentosrodrigues.com	https://everestgroup.com.br
https://fabricaauthenticite.com	https://fabricashoes.com.br
https://fazeventossp.com.br	https://feme.com.br
https://flystorebrasil.com.br	https://futcertobrasil.com
https://Gelniche.com.br	https://gigavarejo.com.br
https://gomic.com.br	https://hofferta.com
https://iluminim.com.br	https://iwoseries.com
https://Lbashop.com.br	https://leggingbrasil.com
https://leggingbrasil.com.br	https://lewadoimports.com
https://liquidashoes.com.br	https://lojaatlantis.com
https://lojabestvarejos.com	https://lojacondi.com
https://lojadigivarejista.com	https://lojadubaiimports.com.br
https://lojaslondrina.com.br	https://lojavitesse.com
https://Lovelybox.com.br	https://luadishop.com.br
https://magazineal.com	https://magazinedosatacados.com
https://magazinestore.com	https://magazinmulher.com.br
https://mundialeletro.com.br	https://nuvemdedescontos.com
https://ofertastore.com	https://offthewall.com.br
https://Outletdasfraldas.com.br	https://peixeurbano.com.br
https://pneusdrive.com.br	https://premierexclusive.com.br
https://rocklin.com.br	https://Rosafashion.com.br
https://safiravillage.com.br	https://saldaocarioca.com.br
https://Santolarmoveis.com.br	https://shopmaxx.com.br
https://Sigaofertas.com.br	https://tecnotec.com.br
https://tiggoshop.com.br	https://usenox.com
https://vivadecor.com.br	https://vivonestore.com
https://zinnimodas.com	https://tailwindcss.com

Page 1 of 333

Raw Manifest

{
  "name": "Surf Safe para Chrome™",
  "icons": {
    "16": "img/security-16px.png",
    "48": "img/security-48px.png",
    "128": "img/security-128px.png"
  },
  "action": {
    "default_icon": {
      "16": "img/security-16px.png",
      "19": "img/security-19px.png",
      "24": "img/security-24px.png",
      "32": "img/security-32px.png",
      "38": "img/security-38px.png",
      "48": "img/security-48px.png",
      "64": "img/security-64px.png",
      "128": "img/security-128px.png"
    },
    "default_popup": "popup.html"
  },
  "version": "1.1",
  "background": {
    "type": "module",
    "service_worker": "js/background.js"
  },
  "short_name": "Surf_Safe_para_Chrome",
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "Proteção contra sites fraudulentos em tempo real.",
  "permissions": [
    "tabs",
    "storage"
  ],
  "default_locale": "pt_BR",
  "content_scripts": [
    {
      "js": [
        "js/rp.js",
        "js/partner.js"
      ],
      "run_at": "document_start",
      "matches": [
        "http://*/*",
        "https://*/*"
      ],
      "all_frames": false
    }
  ],
  "manifest_version": 3
}

by ✦ Astarte