Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: smart-browsing

CRITICAL RISKRemoved from Chrome Web Store

smart-browsing

ID: pppojedoijafijfifgeccckbnccjbbem

Could be malicious

Supported Languages

🇺🇸US English

Extension Info & Metadata

Status

Removed

Version

2.4

Size

0.04 MB

Rating

5.0/5

Reviews

Users

10,000

Type

Extension

Updated

May 6, 2023

Publisher Contextual Analysis

Trusted

Author: johnView Profile
Privacy: Privacy Policy
Help: Help Center
Country: US
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes
Address: 30 N Gould St Ste. N Sheridan, WY 82801-6317 US
Website: Visit

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

12,429

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Smart Browsing is a helpful tool that assists users with a better web experience

A new and powerful Chrome extension designed to enhance your browsing experience by preventing NX domain errors when searching for websites online. With this extension installed, you can easily avoid the frustration of seeing an NX domain error page, which can interrupt your browsing flow. instead, it offers quick and easy options for users to continue browsing online. The landing page features a search field powered by Yahoo that allows users to search for the new website. Additionally, Smart Browsing partners with affiliates to offer users suggestions for related products or services similar to the domain name they were trying to visit. These options make it easier for users to find what they're looking for quickly, when the website they were originally searching for is no longer available. We are a partner extension of and errors.net. Licensing is approved through their api sign up found at https://errors.net/errors-partner-sign-up/

User Growth

Showing data from Apr 28, 2023 to Apr 29, 2024

Versions

No change in user count

Compared to 3 months ago

2 versions released in this period

Rating Count

Total: 3 ratings

Average Rating

Current: 5.00 / 5.0+5.00

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical3

High2

Medium1

Low0

Versions scanned

Showing 1 of 2 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
2.0 Code review	6

Extension Version	Code Review Findings
2.0	6

Files with findings

2 distinct paths — top paths by unique finding count:

worker.js5
performance.js1

S.No.	Category	Severity	File	Summary	Found in Version
1	Network Interception	critical	worker.js (line 983)	Browser-wide hijack of HTTP error responses: for any 4xx/5xx response on any http/https main_frame, the extension closes the user's tab (browser.tabs.remove) and redirects them to errors.net with the full URL, status …	2.0
2	Network Interception	critical	worker.js (line 966)	DNS-failure (NXDOMAIN) hijack: any URL that fails to resolve is rewritten to a third-party errors.net page carrying the user's intended URL, hostname, and tracking UUID. This is the classic 'NXDOMAIN typosquatting/mon…	2.0
3	Remote Code Loading	critical	worker.js (line 921)	Every page load on every http/https site exfiltrates per-install UUID, full navigation timing, and screen/window geometry to errors.net. Worse, the server response is treated as a remote command channel: if it returns…	2.0
4	Tracking	high	worker.js (line 1001)	On first install, the extension generates a persistent UUID stored in chrome.storage.sync (synced across the user's Chrome profiles/devices) and sends it to smart-browsing.com via a forced post-install navigation. Thi…	2.0
5	Unauthorized Data Collection	high	performance.js (line 907)	Content script injected into every http/https page (matches: ':///*') collects full Navigation Timing data plus screen position and inner/outer window dimensions and forwards it to the background worker, which exfil…	2.0
6	Tracking	medium	worker.js (line 19)	Hardcoded 40-character API key tying every install to a single licensed identity at errors.net. Combined with the per-install UUID below, every browsing-error and page-load event is attributable to a specific user acc…	2.0

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


www.w3.org	/1999/02/22-rdf-syntax-ns	http://www.w3.org/1999/02/22-rdf-syntax-ns#
ns.adobe.com	/tiff/1.0/	http://ns.adobe.com/tiff/1.0/
github.com	/mozilla/webextension-polyfill	https://github.com/mozilla/webextension-polyfill
mozilla.org	/MPL/2.0/	http://mozilla.org/MPL/2.0/.
fonts.googleapis.com	/css	https://fonts.googleapis.com/css?family=Roboto:400,500,700
errors.net	-	https://errors.net/
tldrlegal.com	/license/mit-license	https://tldrlegal.com/license/mit-license
mozilla.org	/MPL/2.0/	http://mozilla.org/MPL/2.0/
errors.net	-	https://errors.net
errors.net	/performance/	https://errors.net/performance/?license=

Showing 1 to 10 of 20 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No IP addresses found

5.0 out of 5 · 1 most recent review

Text reviews

Positive

Negative

Dkhili Adel·20 May 2023

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

smart-browsing

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 2 Versions6

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating