Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: 房地小幫手

CRITICAL RISKRemoved from Chrome Web Store

房地小幫手

ID: gddelhbfalppccpbbfdailneoehnnpci

Could be malicious

Supported Languages

🇹🇼Chinese (Traditional)

Extension Info & Metadata

Status

Removed

Version

1.0.20

Size

0.44 MB

Rating

4.0/5

Reviews

Users

20,000

Type

Extension

Updated

Nov 25, 2024

Publisher Contextual Analysis

Author: https://www.foundi.infoView Profile
Privacy: Privacy Policy
Help: Help Center
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes
Website: Visit

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

20,000

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

看到有興趣的案件只有不完整內容嗎？我們幫你呈現可能地址及相關資訊！

常常在網路上看到不完整資訊的案件，但我們又需要更多關於案件的細節嗎？房地小幫手即時幫你找出相關資訊！省時又方便。 1. 安裝擴充 2. 開啟房地相關網站 3. 將滑鼠移到連結上 - 由房地小幫手你找出可能地址！ 4. 開啟案件詳細頁面時，除了可能地址外，還會為你找出關於此案件的其它相關案件、歷史價格及實價登錄資訊唷！更詳細的使用教學可以在 https://agent.foundi.info/helper/overview 看到。 ※ 房地小幫手功能需有 foundi 房地資訊站專業帳號方可正常使用專業會員購買請到 http://www.foundi.info/pricing/

User Growth

Showing data from Jan 01, 2022 to Dec 31, 2022

Versions

No change in user count

Compared to 4 months ago

6 versions released in this period

Rating Count

Total: 9 ratings

Average Rating

Current: 5.00 / 5.0

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical0

High3

Medium2

Low1

Versions scanned

Showing 1 of 55 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
0.4.38 Code review	6

Extension Version	Code Review Findings
0.4.38	6

Files with findings

5 distinct paths — top paths by unique finding count:

js/content_main.js2
js/api.js1
js/auth.js1
js/background.js1
js/content.js1

S.No.	Category	Severity	File	Summary	Found in Version
1	Credential Theft	high	js/auth.js (line 1)	auth.html is a web_accessible_resource and accepts the entire query-string (window.location.search) as the user's session token, persisting it to chrome.storage.sync without any origin/format validation. Because auth.…	0.4.38
2	Data Exfiltration	high	js/api.js (line 32)	Implements the server-side exfiltration sink: takes the page HTML captured from the user's currently-open real-estate site and POSTs it (alongside the user's auth token) to https://api.foundi.info/listing/parse/. Beca…	0.4.38
3	Unauthorized Data Collection	high	js/content_main.js (line 361)	On every supported real-estate detail page (32+ domains in the manifest), the content script captures the FULL rendered HTML of the page via document.documentElement.outerHTML and forwards it through chrome.runtime.se…	0.4.38
4	Network Interception	medium	js/background.js (line 18)	The background service worker fetches arbitrary URLs supplied by content-script messages (e.listingUrl) and returns their full body text to be forwarded to api.foundi.info. Because the URL is taken from page DOM (anch…	0.4.38
5	Remote Code Loading	medium	js/content_main.js (line 30)	Injects a stylesheet from a third-party CDN (maxcdn.bootstrapcdn.com) into every supported real-estate site. This pulls remote resources from a host that is not declared in host_permissions, exposing users to anything…	0.4.38
6	Tracking	low	js/content.js (line 1)	The content script uses dynamic import() of an extension-internal module (content_main.js) instead of static imports, and also injects a marker DOM element (#foundi-chrome-extension-installed) into any foundi.info pag…	0.4.38

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


sale.591.com.tw	-	https://sale.591.com.tw/
www.sinyi.com.tw	/buy/list	https://www.sinyi.com.tw/buy/list
buy.yungching.com.tw	/region	http://buy.yungching.com.tw/region
www.century21.com.tw	/index/House/Buy	http://www.century21.com.tw/index/House/Buy
www.pacific.com.tw	-	http://www.pacific.com.tw/
www.etwarm.com.tw	/houses	https://www.etwarm.com.tw/houses?searchKind=buy&sort=DEFAULT&page=1
www.cthouse.com.tw	-	https://www.cthouse.com.tw/
www.hbhousing.com.tw	/buyHouse/	http://www.hbhousing.com.tw/buyHouse/
www.u-trust.com.tw	/CaseBuy/List.aspx	http://www.u-trust.com.tw/CaseBuy/List.aspx
www.great-home.com.tw	-	http://www.great-home.com.tw/

Showing 1 to 10 of 60 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No IP addresses found

2.8 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

找不到地址一直當機很爛

WAN CC·23 Sept 2024

之前遇到的閃退修復了，更喜歡的現在的操作模式。瀏覽物件的時候搭配查找地址和其他刊登很方便！

Jackie Chen·13 Sept 2024

無法使用,浪費人家的時間,建議退費

林

林小��·31 Jul 2024

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

房地小幫手

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 55 Versions6

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating