Extension Auditor
Extension Auditor
Sign Up

SmartScrub

ID: cfbchhjmpepecmjibkinmfpeikgdnaae

Could be malicious

Supported Languages

🇺🇸English

Extension Info & Metadata

Status
Removed
Version
1.0.2
Size
0.23 MB
Rating
5.0/5
Reviews
19
Users
11,495
Type
Extension
Updated
Jun 17, 2023
Category
7_productivity
Price
Free
Featured
Yes
Visibility
Listed
Mature
No
By Google
No
Trusted
Yes
Download CRX
Chrome Web Store
Report Issue

Publisher Contextual Analysis

Trusted
Author
Margaret ArkinsonView Profile
Privacy
Privacy Policy
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
No
Mailbox exists
Yes
Total Extensions
1
Active
0
Obsolete
1
Listed
1
Unlisted
0
Total Users
11,495

SmartScrub: The Intelligent Solution for a Faster and Cleaner Browser

Get ready to supercharge your browsing experience with SmartScrub, the intelligent browser extension designed to optimize speed and cleanliness. Say goodbye to sluggish performance and cluttered data, and embrace a new era of smart and efficient browsing. Key Benefits: Selective Browsing Data Removal: Take control of your online footprint. SmartScrub allows you to selectively remove browsing data, giving you the power to decide what stays and what goes. Say goodbye to unnecessary clutter and enjoy a cleaner, more organized browsing experience. Customizable Time Periods: Need to clear data from a specific time frame? SmartScrub makes it effortless. With its intuitive interface, you can choose a specific time period for data removal, whether it's the past hour, day, week, or month. It's all about personalized control and convenience. Effortless Cookie Management: Manage your website cookies with ease. SmartScrub lets you remove cookies for the currently open website, ensuring your privacy while maintaining your preferred settings on other websites. Experience peace of mind knowing you have full control over your cookie preferences. Cache-Free Force Refresh: Stay up-to-date without sacrificing performance. SmartScrub offers a cache-free force refresh option, allowing you to update pages instantly without deleting your entire browsing history or cache. Enjoy the latest content without any compromises. SmartScrub is the ultimate solution for a faster, cleaner, and more efficient browsing experience. Say hello to optimized speed, enhanced privacy, and intelligent data management. Don't settle for a subpar browsing experience. Upgrade to SmartScrub today and unlock the true potential of your browser. Download SmartScrub now and experience the power of intelligent browsing.

Item
Type
Severity
Description
declarativeNetRequest
Permission
Critical
This permission allows the extension to define rules to block, redirect, or modify network requests. Rated Critical because it can control all network traffic, potentially blocking security updates or redirecting to malicious sites.
scripting
Permission
Critical
This permission allows injection and execution of JavaScript on any webpage. Rated Critical because it can modify page content, steal sensitive data, and inject malicious code into any site the extension has access to.
<all_urls>
Host
Critical
Broad host access — the extension can read/modify content on every website.
browsingData
Permission
High
This permission clears browsing data, history, and redis. Rated High because it can destroy evidence of malicious activity, clear security logs, and modify browser state.
cookies
Permission
High
This permission provides full access to read and modify browser cookies. Rated High because it can steal session tokens, modify authentication cookies, and compromise accounts across websites.
Broad Host Permissions
Risk Factor
High
This extension has broad host permissions allowing it to access many or all websites.
Broad Content Script Access
Risk Factor
High
This extension can inject scripts into any website.
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
alarms
Permission
Low
This permission schedules periodic tasks. Rated Low because it can only trigger events at specified times without access to sensitive data.

By severity

Critical3
High1
Medium2
Low0

Versions scanned

Showing 1 of 3 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension VersionCode Review Findings
1.0.16

Files with findings

1 distinct path — top paths by unique finding count:

  • js/background.js6
S.No.
Category
Severity
File
Summary
Found in Version
1Obfuscation
critical
js/background.js (line 4322)EA() constructs URL match patterns for chrome.tabs.query by splicing together substrings of innocuous-looking arrays (e.g. Bp[6]='millisecond'.substring(0,2)='mi', Bp[5]='second'.substring(2,4)='co'), queries tabs who…
1.0.1
2Remote Code Loading
critical
js/background.js (line 4246)DK() builds a remote URL (rF) and HTTP method ('POST'/'GET') by concatenating tiny substrings extracted from innocuous date arrays (Bp = ['year','month',...], bH = ['January',...]) — a classic string-obfuscation techn…
1.0.1
3Remote Code Loading
critical
js/background.js (line 4014)GJ is a hand-rolled mini-interpreter / VM that takes an array (received from the remote server via DK() in line 4411-4412 'const st = await DK(); st && GJ(st)') and executes it as opcodes: '@' performs a function call…
1.0.1
4Tracking
high
js/background.js (line 725)On install the extension calls fetch('https://ununsstats.com/install', { credentials: 'include' }) — the credentials:'include' flag forces the browser to attach any cookies it already has for ununsstats.com, and an un…
1.0.1
5Network Interception
medium
js/background.js (line 625)Installs a session-wide declarativeNetRequest rule that rewrites the Cache-Control request header to 'no-cache' for every URL (urlFilter '|*') across all major resource types, on every site the user visits. Even thoug…
1.0.1
6Tracking
medium
js/background.js (line 777)Custom Google Analytics Measurement Protocol implementation with the api_secret 'Ne1MmjzJTJenUSdSc-k0kw' (measurement_id G-WZH9LB72XH) hard-coded in the service worker. It generates a persistent client_id (UUID v4) sa…
1.0.1
URLs
37
IPv4
0
IPv6
0

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

Gain full insight into all external connections.

Upgrade for full visibility.

Sign In
github.com/uuidjs/uuidhttps://github.com/uuidjs/uuid#getrandomvalues-not-supported
ununsstats.com/installhttps://ununsstats.com/install
ununsstats.com/uninstallhttps://ununsstats.com/uninstall
www.google-analytics.com/mp/collecthttps://www.google-analytics.com/mp/collect?${new
npms.io/searchhttps://npms.io/search?q=ponyfill.
www.w3.org/1999/xlinkhttp://www.w3.org/1999/xlink
www.w3.org/XML/1998/namespacehttp://www.w3.org/XML/1998/namespace
reactjs.org/link/controlled-componentshttps://reactjs.org/link/controlled-components
www.w3.org/1999/xhtmlhttp://www.w3.org/1999/xhtml
www.w3.org/1998/Math/MathMLhttp://www.w3.org/1998/Math/MathML
Showing 1 to 10 of 40 rows
Rows per page:

Gain full insight into all external connections.

Upgrade for full visibility.

Sign In
No IP addresses found
Showing 1 to 3 of 10 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files (scanned top 25 shared text files)

No comparable text files found between these versions.

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

Sign In