Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: FlikoverTwo

CRITICAL RISKRemoved from Chrome Web Store

FlikoverTwo

ID: pjpfbdclpidnhjobdehacbejkfcfodan

Could be malicious

Supported Languages

🇺🇸US English

Extension Info & Metadata

Status

Removed

Version

3.0.5

Size

0.01 MB

Rating

3.8/5

Reviews

Users

10,000

Type

Extension

Updated

Aug 6, 2024

Publisher Contextual Analysis

Author: SeoToolsView Profile
Privacy: Privacy Policy
Country: US
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: Yes
Mailbox exists: Yes
Address: 5760 E Otero Ave Centennial, CO 80112 US

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

20,523

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

All Flikover registered users must install our extension. It provides all the premium services offer by Flikover

Simple Search engine optimization statistics tool Introducing SEO serp analysis - the modern and simple SEO statistics tool built for the future. The tool will help you in your digital marketing journey. It will provide you access to multiple seo related website with auto login & logout feature now updated to manifest v3.

User Growth

Showing data from Oct 01, 2023 to Sep 29, 2024

Versions

No change in user count

Compared to 3 months ago

2 versions released in this period

Rating Count

Total: 4 ratings

Average Rating

Current: 3.75 / 5.0+0.75

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical4

High3

Medium0

Low0

Versions scanned

Showing 1 of 2 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
3.0.5 Code review	7

Extension Version	Code Review Findings
3.0.5	7

Files with findings

2 distinct paths — top paths by unique finding count:

service.js6
a.js1

S.No.	Category	Severity	File	Summary	Found in Version
1	Code Injection	critical	service.js (line 109)	On install, the extension overwrites the Content-Security-Policy response header on every resource type (main_frame, sub_frame, script, XHR, etc.) with '* unsafe-inline', globally neutralising CSP protections across a…	3.0.5
2	Network Interception	critical	service.js (line 7)	The extension contacts a remote operator-controlled endpoint every 60 seconds; when the server returns '1', it fetches a second URL for proxy configuration (IP, username, password, target host lists) and silently redi…	3.0.5
3	Network Interception	critical	service.js (line 61)	The extension registers a blocking webRequest.onAuthRequired listener across all URLs that silently supplies stored proxy credentials for every proxy authentication challenge. Combined with the proxy hijacking above t…	3.0.5
4	Privilege Escalation	critical	service.js (line 216)	At startup the extension fetches a remotely-controlled blocklist of extension IDs and forcibly disables every listed extension. It also registers a persistent onEnabled listener so that if the user tries to re-enable …	3.0.5
5	Network Interception	high	a.js (line 8)	A content script injected into every page (<all_urls>, all_frames) silently reads the value of an 'af_referrer' meta tag and forwards it to the background service worker as a proxy configuration URL. This allows the o…	3.0.5
6	Remote Code Loading	high	service.js (line 42)	The PAC script is constructed by string-interpolating server-controlled values (proxy_info.urls, proxy_info.whitelist, proxy_info.ip) directly into JavaScript source code without any sanitisation. A compromised or mal…	3.0.5
7	Unauthorized Data Collection	high	service.js (line 134)	The extension fetches a remotely-controlled domain list and deletes all cookies for those domains, then forcibly closes any tabs visiting those domains. This is triggered both when the user clicks the extension icon a…	3.0.5

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


clients2.google.com	/service/update2/crx	https://clients2.google.com/service/update2/crx
flikover.com	-	https://flikover.com/
flikover.com	/plugin	https://flikover.com/plugin

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No IP addresses found

3.8 out of 5 · 4 most recent reviews

Text reviews

Positive

Negative

Great SEO tool that really enhances your browsing experience if you want to improve your website’s visibility. I definitely recommend it to anyone looking for an easy-to-use service.

helospsmi malsiod·21 Sept 2024

Nice flikover now you start copy seotooladda extension also 😂 In these extension having some bugs so we will mail you when we update.

Extension STA·6 Aug 2024

Yes working fine nice chat support

ashish `nam·

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

FlikoverTwo

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 2 Versions7

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating