NexShield – Advanced Web Guardian

Version 2025.1116.1842 View in Chrome Web Store

Last scanned: 2 months ago | force re-scan

Extension Details

Developer: nexsnield.com

Rating: 4.8 ★ (56 ratings)

Users: 5,000

Context-Aware Verdict

HIGH

Overall Risk

Trust Factors: The extension has a decent user base of 5,000 users and a strong 4.8-star rating from 56 reviews, suggesting positive user experiences. However, the developer domain "nexsnield.com" appears to be a typo or variation of "shield," which raises questions about professionalism and legitimacy. The lack of detailed developer information is concerning for an extension claiming to be an "Advanced Web Guardian."

Concerns: The most significant red flag is the <all_urls> host permission combined with declarativeNetRequest and scripting permissions, creating a powerful combination that could intercept, modify, or block web traffic across all websites. The system.display permission is unusual for a web security tool and could be used for screen monitoring. While the extension claims to be a security guardian, these broad permissions could enable malicious activities like data harvesting, credential theft, or comprehensive browsing surveillance. The alarms permission suggests background activity that may not be transparent to users.

Recommendations: Given the high-risk permission combination, consider running this extension in a separate Chrome profile to isolate potential security risks. Before installation, research the developer more thoroughly and verify the legitimacy of nexsnield.com. Consider alternative web security extensions from established security companies with clearer privacy policies and more transparent operations. If you must use this extension, regularly monitor your browsing behavior and be alert to any unusual network activity.

Findings

HIGH

Broad Host Permissions

This extension has broad host permissions allowing it to access many or all websites. This could potentially be used to steal sensitive data or track browsing activity.

MEDIUM

Medium-Risk Permission: activeTab

This extension has the activeTab permission. Can access the active tab when clicking the extension icon.

MEDIUM

Medium-Risk Permission: storage

This extension has the storage permission. Can store data locally.

Security Analysis Details

Required Permissions:

activeTab
declarativeNetRequest
scripting
storage
alarms
system.display

Host Permissions:

<all_urls>

Embedded URLs (4910 total):

https://developer.apple.com/documentation/safari-developer-tools/develop-menu	https://github.com/nexshieldOrigin/uAssets/issues?q=is%3Aissue
https://wikipedia.org/wiki/Not_safe_for_work	https://be-tarask.wikipedia.org/wiki/NSFW
https://ca.wikipedia.org/wiki/NSFW	https://cs.wikipedia.org/wiki/Not_safe_for_work
https://es.wikipedia.org/wiki/NSFW	https://he.wikipedia.org/wiki/NSFW
https://pl.wikipedia.org/wiki/NSFW	https://pt.wikipedia.org/wiki/Not_safe_for_work
https://ru.wikipedia.org/wiki/NSFW	https://uk.wikipedia.org/wiki/NSFW
https://zh.wikipedia.org/zh-hans/NSFW	https://protocol.mozilla.org/assets/docs/css/protocol.css
https://github.com/nexshieldOrigin/nexshield-issues/issues/1005	https://material.io/components/selection-controls
https://protocol.mozilla.org/	https://material.io/
https://protocol.mozilla.org/docs/fundamentals/color.html	https://www.hsluv.org/
https://bernaferrari.github.io/color-studio/#/	https://github.com/nexshieldOrigin/nexshield-issues/issues/1027#issuecomment-629641072
https://material.io/design/color/text-legibility.html#text-backgrounds	https://material.io/design/color/dark-theme.html
https://davidmathlogic.com/colorblind/	https://discuss.codemirror.net/t/how-to-set-max-height-of-the-editor/2882/2
https://github.com/rsms/inter	http://scripts.sil.org/OFL
http://www.gnu.org/licenses/	https://github.com/gorhill/nexshield
https://github.com/nexshieldOrigin/uBOL-home/wiki/Privacy-policy	https://github.com/nexshieldOrigin/uBOL-home/releases
https://github.com/gorhill/nexshield/graphs/contributors	https://crowdin.com/project/nexshield
https://github.com/nexshieldOrigin/uAssets/graphs/contributors	https://github.com/rsms
https://fontawesome.com/	https://github.com/davegandy
https://github.com/mathiasbynens/punycode.js	https://github.com/mathiasbynens
https://flagpedia.net/	https://www.davidkrmela.com/
https://codemirror.net/	https://github.com/marijnh
https://flagpedia.net/about	http://www.inkscape.org/namespaces/inkscape
http://sodipodi.sourceforge.net/DTD/sodipodi-0.dtd	http://www.w3.org/2000/svg
https://github.com/nexshieldOrigin/uBOL-home/issues/198	https://www.nexsnield.com/
https://github.com/nexshieldOrigin/uBOL-home/issues/280	https://nexsnield.com
https://bugs.webkit.org/show_bug.cgi?id=262491	https://developer.mozilla.org/en-US/docs/Mozilla/Add-ons/WebExtensions/API/runtime/MessageSender
https://developer.mozilla.org/en-US/docs/Mozilla/Add-ons/WebExtensions/API/declarativeNetRequest	https://github.com/nexshieldOrigin/uBOL-home/issues/199
https://codemirror.net/examples/autocompletion/	https://github.com/nexshieldOrigin/uBOL-home/issues/114
https://github.com/nexshieldOrigin/uBOL-home/issues/247	https://github.com/gorhill/uMatrix
https://github.com/nexshieldOrigin/nexshield-issues/issues/1196	http://www.w3.org/International/questions/qa-scripts#directions
https://github.com/gorhill/nexshield/issues/2084	https://goessner.net/articles/JsonPath/index.html
https://mths.be/punycode	https://mathiasbynens.be/notes/javascript-encoding
http://tools.ietf.org/html/rfc3492#section-3.4	https://github.com/nexshieldOrigin/uAssets/issues/new?template=specific_report_from_ubol.yml
https://github.com/nexshieldOrigin/uAssets/issues	https://github.com/nexshieldOrigin/uBOL-home/issues/428#issuecomment-3172663563
https://bugs.webkit.org/show_bug.cgi?id=298199	https://developer.apple.com/forums/thread/756214
http://www.cse.yorku.ca/~oz/hash.html#djb2	https://github.com/gorhill/nexshield/issues/672
http://www.w3.org/TR/2014/REC-html5-20141028/infrastructure.html#space-separated-tokens	http://jsperf.com/enumerate-classes/6
https://github.com/nexshieldOrigin/nexshield-issues/discussions/2076	https://github.com/AdguardTeam/ExtendedCss/issues/31#issuecomment-302391277
https://github.com/nexshieldOrigin/nexshield-issues/issues/341	https://github.com/gorhill/nexshield/

Page 1 of 62

Raw Manifest

{
  "name": "__MSG_extName__",
  "icons": {
    "16": "img/icon_16.png",
    "32": "img/icon_32.png",
    "64": "img/icon_64.png",
    "128": "img/icon_128.png"
  },
  "action": {
    "default_icon": {
      "16": "img/icon_16.png",
      "32": "img/icon_32.png",
      "64": "img/icon_64.png"
    },
    "default_popup": "popup.html"
  },
  "author": "Raymond Hill",
  "storage": {
    "managed_schema": "managed_storage.json"
  },
  "version": "2025.1116.1842",
  "commands": {
    "enter-picker-mode": {
      "description": "__MSG_pickerTipEnter__"
    },
    "enter-zapper-mode": {
      "description": "__MSG_zapperTipEnter__"
    }
  },
  "incognito": "split",
  "background": {
    "type": "module",
    "service_worker": "/js/background.js"
  },
  "short_name": "NexShield",
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "__MSG_extShortDesc__",
  "permissions": [
    "activeTab",
    "declarativeNetRequest",
    "scripting",
    "storage",
    "alarms",
    "system.display"
  ],
  "options_page": "dashboard.html",
  "default_locale": "en",
  "host_permissions": [
    "<all_urls>"
  ],
  "manifest_version": 3,
  "minimum_chrome_version": "122.0",
  "declarative_net_request": {
    "rule_resources": [
      {
        "id": "nexshield-filters",
        "path": "/rulesets/main/nexshield-filters.json",
        "enabled": true
      },
      {
        "id": "easylist",
        "path": "/rulesets/main/easylist.json",
        "enabled": true
      },
      {
        "id": "easyprivacy",
        "path": "/rulesets/main/easyprivacy.json",
        "enabled": true
      },
      {
        "id": "pgl",
        "path": "/rulesets/main/pgl.json",
        "enabled": true
      },
      {
        "id": "nexshield-badware",
        "path": "/rulesets/main/nexshield-badware.json",
        "enabled": true
      },
      {
        "id": "urlhaus-full",
        "path": "/rulesets/main/urlhaus-full.json",
        "enabled": true
      },
      {
        "id": "adguard-mobile",
        "path": "/rulesets/main/adguard-mobile.json",
        "enabled": false
      },
      {
        "id": "block-lan",
        "path": "/rulesets/main/block-lan.json",
        "enabled": false
      },
      {
        "id": "dpollock-0",
        "path": "/rulesets/main/dpollock-0.json",
        "enabled": false
      },
      {
        "id": "adguard-spyware-url",
        "path": "/rulesets/main/adguard-spyware-url.json",
        "enabled": false
      },
      {
        "id": "annoyances-cookies",
        "path": "/rulesets/main/annoyances-cookies.json",
        "enabled": false
      },
      {
        "id": "annoyances-overlays",
        "path": "/rulesets/main/annoyances-overlays.json",
        "enabled": false
      },
      {
        "id": "annoyances-social",
        "path": "/rulesets/main/annoyances-social.json",
        "enabled": false
      },
      {
        "id": "annoyances-widgets",
        "path": "/rulesets/main/annoyances-widgets.json",
        "enabled": false
      },
      {
        "id": "annoyances-others",
        "path": "/rulesets/main/annoyances-others.json",
        "enabled": false
      },
      {
        "id": "annoyances-notifications",
        "path": "/rulesets/main/annoyances-notifications.json",
        "enabled": false
      },
      {
        "id": "nexshield-experimental",
        "path": "/rulesets/main/nexshield-experimental.json",
        "enabled": false
      },
      {
        "id": "stevenblack-hosts",
        "path": "/rulesets/main/stevenblack-hosts.json",
        "enabled": false
      },
      {
        "id": "ubol-tests",
        "path": "/rulesets/main/ubol-tests.json",
        "enabled": false
      },
      {
        "id": "alb-0",
        "path": "/rulesets/main/alb-0.json",
        "enabled": false
      },
      {
        "id": "bgr-0",
        "path": "/rulesets/main/bgr-0.json",
        "enabled": false
      },
      {
        "id": "chn-0",
        "path": "/rulesets/main/chn-0.json",
        "enabled": false
      },
      {
        "id": "cze-0",
        "path": "/rulesets/main/cze-0.json",
        "enabled": false
      },
      {
        "id": "deu-0",
        "path": "/rulesets/main/deu-0.json",
        "enabled": false
      },
      {
        "id": "est-0",
        "path": "/rulesets/main/est-0.json",
        "enabled": false
      },
      {
        "id": "fin-0",
        "path": "/rulesets/main/fin-0.json",
        "enabled": false
      },
      {
        "id": "fra-0",
        "path": "/rulesets/main/fra-0.json",
        "enabled": false
      },
      {
        "id": "grc-0",
        "path": "/rulesets/main/grc-0.json",
        "enabled": false
      },
      {
        "id": "hrv-0",
        "path": "/rulesets/main/hrv-0.json",
        "enabled": false
      },
      {
        "id": "hun-0",
        "path": "/rulesets/main/hun-0.json",
        "enabled": false
      },
      {
        "id": "idn-0",
        "path": "/rulesets/main/idn-0.json",
        "enabled": false
      },
      {
        "id": "ind-0",
        "path": "/rulesets/main/ind-0.json",
        "enabled": false
      },
      {
        "id": "irn-0",
        "path": "/rulesets/main/irn-0.json",
        "enabled": false
      },
      {
        "id": "isl-0",
        "path": "/rulesets/main/isl-0.json",
        "enabled": false
      },
      {
        "id": "isr-0",
        "path": "/rulesets/main/isr-0.json",
        "enabled": false
      },
      {
        "id": "ita-0",
        "path": "/rulesets/main/ita-0.json",
        "enabled": false
      },
      {
        "id": "jpn-1",
        "path": "/rulesets/main/jpn-1.json",
        "enabled": false
      },
      {
        "id": "kor-1",
        "path": "/rulesets/main/kor-1.json",
        "enabled": false
      },
      {
        "id": "ltu-0",
        "path": "/rulesets/main/ltu-0.json",
        "enabled": false
      },
      {
        "id": "lva-0",
        "path": "/rulesets/main/lva-0.json",
        "enabled": false
      },
      {
        "id": "mkd-0",
        "path": "/rulesets/main/mkd-0.json",
        "enabled": false
      },
      {
        "id": "nld-0",
        "path": "/rulesets/main/nld-0.json",
        "enabled": false
      },
      {
        "id": "nor-0",
        "path": "/rulesets/main/nor-0.json",
        "enabled": false
      },
      {
        "id": "pol-0",
        "path": "/rulesets/main/pol-0.json",
        "enabled": false
      },
      {
        "id": "rou-1",
        "path": "/rulesets/main/rou-1.json",
        "enabled": false
      },
      {
        "id": "rus-0",
        "path": "/rulesets/main/rus-0.json",
        "enabled": false
      },
      {
        "id": "rus-1",
        "path": "/rulesets/main/rus-1.json",
        "enabled": false
      },
      {
        "id": "spa-0",
        "path": "/rulesets/main/spa-0.json",
        "enabled": false
      },
      {
        "id": "spa-1",
        "path": "/rulesets/main/spa-1.json",
        "enabled": false
      },
      {
        "id": "svn-0",
        "path": "/rulesets/main/svn-0.json",
        "enabled": false
      },
      {
        "id": "swe-1",
        "path": "/rulesets/main/swe-1.json",
        "enabled": false
      },
      {
        "id": "tha-0",
        "path": "/rulesets/main/tha-0.json",
        "enabled": false
      },
      {
        "id": "tur-0",
        "path": "/rulesets/main/tur-0.json",
        "enabled": false
      },
      {
        "id": "ukr-0",
        "path": "/rulesets/main/ukr-0.json",
        "enabled": false
      },
      {
        "id": "vie-1",
        "path": "/rulesets/main/vie-1.json",
        "enabled": false
      }
    ]
  },
  "web_accessible_resources": [
    {
      "matches": [
        "<all_urls>"
      ],
      "resources": [
        "/strictblock.html"
      ],
      "use_dynamic_url": true
    },
    {
      "matches": [
        "<all_urls>"
      ],
      "resources": [
        "/zapper-ui.html"
      ],
      "use_dynamic_url": true
    },
    {
      "matches": [
        "<all_urls>"
      ],
      "resources": [
        "/picker-ui.html"
      ],
      "use_dynamic_url": true
    },
    {
      "matches": [
        "<all_urls>"
      ],
      "resources": [
        "/unpicker-ui.html"
      ],
      "use_dynamic_url": true
    },
    {
      "matches": [
        "<all_urls>"
      ],
      "resources": [
        "web_accessible_resources/noop.js",
        "web_accessible_resources/amazon_apstag.js",
        "web_accessible_resources/google-ima.js",
        "web_accessible_resources/fingerprint2.js",
        "web_accessible_resources/noop.txt",
        "web_accessible_resources/1x1.gif",
        "web_accessible_resources/noop.css",
        "web_accessible_resources/32x32.png",
        "web_accessible_resources/2x2.png",
        "web_accessible_resources/empty",
        "web_accessible_resources/noop.html",
        "web_accessible_resources/amazon_ads.js",
        "web_accessible_resources/googletagservices_gpt.js",
        "web_accessible_resources/google-analytics_analytics.js",
        "web_accessible_resources/nofab.js",
        "web_accessible_resources/hd-main.js",
        "web_accessible_resources/popads.js",
        "web_accessible_resources/googlesyndication_adsbygoogle.js",
        "web_accessible_resources/prebid-ads.js",
        "web_accessible_resources/doubleclick_instream_ad_status.js",
        "web_accessible_resources/google-analytics_cx_api.js",
        "web_accessible_resources/scorecardresearch_beacon.js",
        "web_accessible_resources/google-analytics_ga.js",
        "web_accessible_resources/outbrain-widget.js",
        "web_accessible_resources/fingerprint3.js",
        "web_accessible_resources/noop-vmap1.xml",
        "web_accessible_resources/noop-vast3.xml",
        "web_accessible_resources/noop-0.1s.mp3",
        "web_accessible_resources/noop-1s.mp4",
        "web_accessible_resources/nobab2.js",
        "web_accessible_resources/chartbeat.js",
        "web_accessible_resources/noop.json",
        "web_accessible_resources/noeval-silent.js",
        "web_accessible_resources/click2load.html"
      ],
      "use_dynamic_url": true
    }
  ]
}

by ✦ Astarte