Extension Auditor
Extension Auditor
Sign Up

셀러마스터 스마트스토어 판매량 분석

ID: adblgkpdmioepnloonmholcapccfnnlo

Could be malicious

Supported Languages

🇰🇷Korean

Extension Info & Metadata

Status
Removed
Version
1.1
Size
0.05 MB
Rating
3.4/5
Reviews
9
Users
30,000
Type
Extension
Updated
Jun 22, 2022
Category
Productivity Workflow
Price
Free
Featured
No
Visibility
Listed
Mature
No
By Google
No
Trusted
No
Download CRX
Chrome Web Store
Report Issue

Publisher Contextual Analysis

Author
https://whereispost.comView Profile
Privacy
Privacy Policy
Country
KR
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
No
Mailbox exists
Yes
Address
파랑로 495 에이스하이테크시티 2동 927호 서구, 인천광역시 22770 KR
Website
Visit
Total Extensions
1
Active
0
Obsolete
1
Listed
1
Unlisted
0
Total Users
30,000

셀러마스터 스마트스토어 상품 판매량 분석 도구

스마트스토어 판매량 분석 판매건수 조회 예상매출을 확인할 수 있습니다.

Item
Type
Severity
Description
tabs
Permission
Medium
This permission enables tab management and monitoring. Rated Medium because it can track open tabs, access tab metadata, and monitor user browsing patterns.
*://keymaz.com/*
Host
Medium
Host permission — access limited to this URL pattern.
*://whereispost.com/*
Host
Medium
Host permission — access limited to this URL pattern.

By severity

Critical0
High0
Medium1
Low1

Versions scanned

Showing 1 of 2 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension VersionCode Review Findings
1.02

Files with findings

1 distinct path — top paths by unique finding count:

  • product.js2
S.No.
Category
Severity
File
Summary
Found in Version
1Unauthorized Data Collection
medium
product.js (line 1)When the popup opens, the extension reads the active tab's full URL (including any query string parameters) and POSTs it to a third-party server at keymaz.com via an unencrypted-by-design `bot/sc/?url=` endpoint. A co…
1.0
2Data Exfiltration
low
product.js (line 66)The exfiltration endpoint path `/bot/sc/` uses 'bot' naming which, combined with a second commented-out backup domain (whereispost.com) declared in host_permissions, suggests an infrastructure pattern of swappable col…
1.0
URLs
3
IPv4
0
IPv6
0

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

Gain full insight into all external connections.

Upgrade for full visibility.

Sign In
clients2.google.com/service/update2/crxhttps://clients2.google.com/service/update2/crx
whereispost.com/salescount/sc/https://whereispost.com/salescount/sc/?url=
keymaz.com/bot/sc/https://keymaz.com/bot/sc/?url=

Gain full insight into all external connections.

Upgrade for full visibility.

Sign In
No IP addresses found
Version
Size
Is Malicious
Findings
Permhash
1.0
Latest
0.05 MB
Malicious
2
6bc8a65de24ee8af6836e9b0a829e1a5f86fdfa51a779152decb4e386158e5ad
1.1
0.05 MB
Malicious
—
32d3fedad4cfedcc9ea856b5cad0607b18233a469570c39bfd1968a20075ebad
Showing 1 to 2 of 10 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files (scanned top 25 shared text files)

No comparable text files found between these versions.

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

Sign In