Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Clientify Gmail Extension

CRITICAL RISKRemoved from Chrome Web Store

Clientify Gmail Extension

ID: hailicbkdbafdecnhoobjpffbfdnkdkc

Could be malicious

Supported Languages

🇺🇸English

🇪🇸Spanish

Extension Info & Metadata

Status

Removed

Version

2.2.3

Size

2.24 MB

Rating

3.5/5

Reviews

Users

1,281

Type

Extension

Updated

Jul 28, 2023

Publisher Contextual Analysis

Trusted

Author: http://clientify.comView Profile
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: Yes
Mailbox exists: Yes

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

2,281

Clientify Gmail Extension

Gmail se fusiona con Clientify para poder darte superpoderes en tu trabajo diario. Gracias a esta extensión podrás: Utilizar clientify desde dentro de gmail Poder importar los contactos que te envien correos directamente Obtener más información de quién te escriba Poder usar las plantillas creadas en clientify dentro de gmail Trackear la apertura y el clic de tus envios desde gmail Y muchas cosas más Y no lo olvides un gran poder conlleva una gran responsabilidad ;)

User Growth

Showing data from Jan 01, 2022 to Dec 31, 2022

Versions

+12.27%(+140 users)

Compared to 3 months ago

8 versions released in this period

Rating Count

Total: 2 ratings

Average Rating

Current: 3.50 / 5.0-1.50

Item	Type	Severity	Description
scripting	Permission	Critical	This permission allows injection and execution of JavaScript on any webpage. Rated Critical because it can modify page content, steal sensitive data, and inject malicious code into any site the extension has access to.
identity	Permission	High	This permission accesses Chrome identity service and user information. Rated High because it can obtain OAuth tokens, access connected accounts, and impersonate the user in authenticated service.
clipboardWrite	Permission	High	This permission allows modification of clipboard content. Rated High because it can inject malicious content into the clipboard, modify copied passwords, and manipulate copied data.
Contextual Risk Factors	Risk Factor	High	The following context increases the overall risk:• 20% increase: Access to sensitive domains increases potential impact
tabs	Permission	Medium	This permission enables tab management and monitoring. Rated Medium because it can track open tabs, access tab metadata, and monitor user browsing patterns.
storage	Permission	Medium	This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
https://fonts.gstatic.com/*	Host	Medium	Host permission — access limited to this URL pattern.
https://fonts.gstatic.com/	Host	Medium	Host permission — access limited to this URL pattern.
https://fonts.sandbox.google.com/*	Host	Medium	Host permission — access limited to this URL pattern.
http://fonts.sandbox.google.com/*	Host	Medium	Host permission — access limited to this URL pattern.
https://fonts.googleapis.com/css	Host	Medium	Host permission — access limited to this URL pattern.
https://fonts.googleapis.com/	Host	Medium	Host permission — access limited to this URL pattern.
https://ajax.googleapis.com/	Host	Medium	Host permission — access limited to this URL pattern.
https://ajax.googleapis.com/*	Host	Medium	Host permission — access limited to this URL pattern.
https://maxcdn.bootstrapcdn.com/	Host	Medium	Host permission — access limited to this URL pattern.
https://mail.google.com/*	Host	Medium	Host permission — access limited to this URL pattern.
http://mail.google.com/*	Host	Medium	Host permission — access limited to this URL pattern.
Access to Sensitive Domains	Risk Factor	Medium	This extension requests access to sensitive domains: https://fonts.sandbox.google.com/, http://fonts.sandbox.google.com/, https://fonts.googleapis.com/css, https://fonts.googleapis.com/, https://ajax.googleapis.com/, https://ajax.googleapis.com/, https://mail.google.com/, http://mail.google.com/*

Sensitive Domain Access

This extension has access to the following sensitive domains:

https://fonts.sandbox.google.com/*
http://fonts.sandbox.google.com/*
https://fonts.googleapis.com/css
https://fonts.googleapis.com/
https://ajax.googleapis.com/
https://ajax.googleapis.com/*
https://mail.google.com/*
http://mail.google.com/*

URLs

144

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

Gain full insight into all external connections.

Upgrade for full visibility.


api.clientify.net	/v1/	https://api.clientify.net/v1/
mail.google.com	/mail/u/0/	https://mail.google.com/mail/u/0/#inbox
mail.google.com	/mail/	https://mail.google.com/mail/
app.clientify.com	-	https://app.clientify.com/
clientify.com	-	https://clientify.com/
clientify.net	/accounts/register/	https://clientify.net/accounts/register/
mail.google.com	/mail/*	https://mail.google.com/mail/*
mail.google.com	/mail/*	http://mail.google.com/mail/*
accounts.google.com	/*	https://accounts.google.com/*
mail.google.com	/*	https://mail.google.com/*

Showing 1 to 10 of 150 rows

Rows per page:

Gain full insight into all external connections.

Upgrade for full visibility.

No IP addresses found

3.5 out of 5 · 2 most recent reviews

Text reviews

Positive

Negative

Descargue el complemento esperando que me ayudara a relacionar correos a las oportunidades de Clientify, ya que hacerlo desde la plataforma es muy lento... Pero no permite relacionar correos a oportunidades, realmente eso sería un gran aporte para el manejo del CRM

Omar Lepe·10 May 2022

Excelente

Pamo Colombia·18 Nov 2020

Version	Size	Is Malicious	Findings	Permhash
2.2.2 Latest	2.24 MB	Malicious	—	0340445900b9ab3d9a48d27eb40046b97d49e38f55808a0e66e02dceae079fbe
2.2.1	2.25 MB	Malicious	—	0340445900b9ab3d9a48d27eb40046b97d49e38f55808a0e66e02dceae079fbe
2.2	2.25 MB	Malicious	—	0340445900b9ab3d9a48d27eb40046b97d49e38f55808a0e66e02dceae079fbe
2.1.4	2.25 MB	Malicious	—	0340445900b9ab3d9a48d27eb40046b97d49e38f55808a0e66e02dceae079fbe
2.1.1	2.25 MB	Malicious	—	0340445900b9ab3d9a48d27eb40046b97d49e38f55808a0e66e02dceae079fbe
2.1	2.25 MB	Malicious	—	0340445900b9ab3d9a48d27eb40046b97d49e38f55808a0e66e02dceae079fbe
2.0.4.1	2.21 MB	Malicious	—	0340445900b9ab3d9a48d27eb40046b97d49e38f55808a0e66e02dceae079fbe
2.0.4	2.21 MB	Malicious	—	0340445900b9ab3d9a48d27eb40046b97d49e38f55808a0e66e02dceae079fbe
2.0.3	2.02 MB	Malicious	—	0340445900b9ab3d9a48d27eb40046b97d49e38f55808a0e66e02dceae079fbe
2.0.1	1.42 MB	Malicious	—	3304668866faee7ac7cd28f341f4167577247bc3d7831cd476fc5fa345f8b7e1

Showing 1 to 10 of 20 rows

Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files (scanned top 25 shared text files)

No comparable text files found between these versions.

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

Security Alert: Confirmed Malware

Clientify Gmail Extension

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Manifest File Security Analysis

Sensitive Domain Access

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Growth

Rating Count

Average Rating

User Reviews