Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Smart site blocker

CRITICAL RISKRemoved from Chrome Web Store

Smart site blocker

ID: abgaibelidemcmpblddblcgacmonanal

Could be malicious

Supported Languages

🇧🇩Bengali

🇧🇷Brazilian Portuguese

🇬🇧British English

🇧🇬Bulgarian

🇪🇸Catalan

🇨🇳Chinese (Simplified)

🇹🇼Chinese (Traditional)

🇭🇷Croatian

🇨🇿Czech

🇩🇰Danish

🇳🇱Dutch

🇺🇸English

🇪🇪Estonian

🇵🇭Filipino

🇫🇮Finnish

🇫🇷French

🇩🇪German

🇬🇷Greek

🇮🇳Gujarati

🇮🇳Hindi

🇭🇺Hungarian

🇮🇩Indonesian

🇮🇹Italian

🇯🇵Japanese

🇰🇷Korean

🇱🇻Latvian

🇱🇹Lithuanian

🇲🇾Malay

🇮🇳Malayalam

🇮🇳Marathi

🇳🇴Norwegian

🇵🇱Polish

🇵🇹Portuguese

🇷🇴Romanian

🇷🇺Russian

🇷🇸Serbian

🇸🇰Slovak

🇸🇮Slovenian

🇪🇸Spanish

🇸🇪Swedish

🇮🇳Tamil

🇮🇳Telugu

🇹🇭Thai

🇹🇷Turkish

🇺🇸US English

🇻🇳Vietnamese

Extension Info & Metadata

Status

Removed

Version

2.6.0

Size

0.31 MB

Rating

3.8/5

Reviews

Users

156,894

Type

Extension

Updated

Mar 9, 2021

Publisher Contextual Analysis

Author: Orland NienowView Profile
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

156,894

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Block access to certain websites with access codes and a schedule.

Smart Site Blocker allows you to set up PIN code for web sites. With Smart Site Blocker, you can restrict access to certain websites. Features: ⭐ Four-digit access code for web sites ⭐ Schedule by time and weekdays ⭐ The settings page is also protected with PIN code ⭐ Easy to use You can use Smart Site Blocker for productivity reasons - blocking access to entertainment services from 9 AM till 6 PM. Also, you can use it as a simple parental control app - e.g. block Youtube after 10 PM for your child.

User Growth

No data available

No user growth data available for this extension

Rating Count

No data available

No rating count data available for this extension

Average Rating

No data available

No rating data available for this extension

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical1

High5

Medium3

Low0

Versions scanned

Showing 1 of 2 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
2.5.1 Code review	9

Extension Version	Code Review Findings
2.5.1	9

Files with findings

4 distinct paths — top paths by unique finding count:

background.js3
manifest.json3
inject.js2
pages/settings/settings.js1

S.No.	Category	Severity	File	Summary	Found in Version
1	Network Interception	critical	background.js (line 6848)	The extension intercepts all HTTP responses using webRequestBlocking and silently strips Content-Security-Policy and X-Frame-Options headers from any domain in its blocked list. CSP is a fundamental browser security c…	2.5.1
2	Code Injection	high	inject.js (line 6543)	The content script injected at document_start completely replaces the visited page's DOM using document.documentElement.innerHTML with extension-controlled HTML. This destroys the original page content, replaces it wi…	2.5.1
3	Code Injection	high	background.js (line 6817)	The background script programmatically injects inject.js into tabs at document_start — the earliest possible execution point, before the page's own DOM or scripts load. This gives the extension full control over the p…	2.5.1
4	Code Injection	high	background.js (line 6799)	This background script injects `inject.js` into arbitrary tabs at `document_start`, backed by `tabs` and `<all_urls>` access. Injecting extension code into every matching site before the page fully renders is a powerf…	2.5.1
5	Phishing	high	inject.js (line 6502)	The injected script completely replaces the current page DOM with extension-controlled HTML, suppressing the original site and rendering its own prompt. Full-page replacement on third-party sites is a phishing-like pa…	2.5.1
6	Remote Code Loading	high	manifest.json (line 19)	The manifest CSP explicitly includes 'unsafe-eval', allowing the extension to execute dynamically constructed strings as code via eval() or new Function(). It simultaneously whitelists three external script origins (G…	2.5.1
7	Remote Code Loading	medium	manifest.json (line 13)	The extension explicitly relaxes its CSP to allow `unsafe-eval` and remote script origins such as Google Analytics, Google Tag Manager, and `*.googleapis.com`. Even though no live analytics calls were found elsewhere …	2.5.1
8	Tracking	medium	manifest.json (line 19)	The CSP whitelists Google Analytics and Google Tag Manager as permitted script sources, yet no analytics initialization code exists in any bundled JS file. This pattern — whitelisting an analytics domain without shipp…	2.5.1
9	Unauthorized Data Collection	medium	pages/settings/settings.js (line 194)	The user's 4-digit PIN password is stored in plaintext in chrome.storage.local under the key 'password'. Chrome storage is accessible to any script running in the extension's context and to other extensions with 'stor…	2.5.1

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


developer.mozilla.org	/docs/Mozilla/Add-ons/WebExtensions/API/runtime/onMessage	https://developer.mozilla.org/docs/Mozilla/Add-ons/WebExtensions/API/runtime/onMessage
npms.io	/search	https://npms.io/search?q=ponyfill.
b1	/filter/b2/preset.json	https://b1/filter/b2/preset.json
jquery.com	-	https://jquery.com/
sizzlejs.com	-	https://sizzlejs.com/
jquery.org	/license	https://jquery.org/license
github.com	/whatwg/html/issues/2369	https://github.com/whatwg/html/issues/2369
html.spec.whatwg.org	-	https://html.spec.whatwg.org/#nonce-attributes
js.foundation	-	https://js.foundation/
jsperf.com	/thor-indexof-vs-for/5	https://jsperf.com/thor-indexof-vs-for/5

Showing 1 to 10 of 70 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


2.3.3.3	IPv4	-
2.3.3.1	IPv4	-

3.4 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

Work as expected.

Federico Cohen·12 Jun 2021

Downloaded specifically to block Youtube. It doesn't block it at all. I have added Youtube to the blocked sites list three different ways, and it still loads right up. Useless.

Madeleine Fosbinder·11 Jun 2021

ما بشتغل

roaa aaa·6 Jun 2021

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Smart site blocker

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 2 Versions9

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Growth

Rating Count

Average Rating

User Reviews