Is ScamShield - AI Job Scam Detector safe to use?

ScamShield - AI Job Scam Detector has a security risk score of 55.46/100 (MEDIUM risk). Our security analysis detected 162 findings. Review the detailed security assessment below to understand the specific risks before installation.

What are the security risks of ScamShield - AI Job Scam Detector?

Based on our automated security analysis, ScamShield - AI Job Scam Detector presents medium risk level. The extension is analyzed for malware patterns, secret exposure, network communications, permissions, and supply chain vulnerabilities.

How is the security score calculated?

Risky Plugins calculates security scores using weighted categories: severity of findings (25 points max), malware detections (35 points), secret exposure (28 points), network communications (10 points), and obfuscation (10 points). Scores range from 0-100, with higher scores indicating greater risk.

What does CRITICAL, HIGH, MEDIUM, LOW, MINIMAL risk mean?

CRITICAL (80-100): Severe security issues like malware. HIGH (60-79): Significant vulnerabilities. MEDIUM (40-59): Moderate security concerns. LOW (20-39): Minor issues. MINIMAL (0-19): Very low risk. Always review findings before installing any extension.

Is "ScamShield - AI Job Scam Detector" on Chrome Web Store Safe to Install?

[email protected] · chrome · v1.0.0

This extension protects job seekers from employment scams and ghost jobs by using AI and machine learning to analyze job postings in real-time. As you browse job listings such as Linkedin, ZipRecruiter, etc, it automatically scans each posting and provides an instant risk assessment. Users should install it because job scams are on the rise. There are fake job listings that steal user's personal information or money. This extension acts as your guard while job hunting saving you from potentially scams.

Risk Assessment

Analyzed

55.46

out of 100

MEDIUM

162 security findings detected across all analyzers

Chrome extension requesting 12 permissions

Severity Breakdown

Critical

High

122

Medium

Low

Info

Finding Categories

Malware Signatures

120

IoC Indicators

YARA Rules Matched

7 rules(39 hits)

postinstall file manipulation postinstall system command postinstall crypto operations AlertStatementsShouldNotBeUsed postinstall network communication postinstall file download NoUseWeakRandom

Requested Permissions

12 permissions

tabs

Medium

storage

Low

notifications

Low

https://*.linkedin.com/*

Low

https://*.indeed.com/*

Low

https://*.ziprecruiter.com/*

Low

https://*.glassdoor.com/*

Low

https://*.monster.com/*

Low

https://*.careerbuilder.com/*

Low

https://*.dice.com/*

Low

https://*.angel.co/*

Low

https://*.wellfound.com/*

Low

About This Extension

Detailed Findings

41 total

YARA Rule Matches

7 rules

Indicators of Compromise

Network indicators, suspicious strings, and potential IoCs extracted during analysis

URLs

IP Addresses

Domains

Strings

120

All Indicators · 120

Domain

detected Domain: github.com

XIOC detected Domain: github.com

extracted_from_files

Domain

detected Domain: dk.cz

XIOC detected Domain: dk.cz

extracted_from_files

URL

detected URL: https://scamshield.ai/terms'

XIOC detected URL: https://scamshield.ai/terms'

extracted_from_files

URL

detected URL: https://github.com/scamshield/extension.git

XIOC detected URL: https://github.com/scamshield/extension.git

extracted_from_files

URL

detected URL: https://github.com/scamshield/extension/issues

XIOC detected URL: https://github.com/scamshield/extension/issues

extracted_from_files

URL

detected URL: https://scamshield.ai

XIOC detected URL: https://scamshield.ai

extracted_from_files

URL

detected URL: https://scamshield.ai/help'

XIOC detected URL: https://scamshield.ai/help'

extracted_from_files

URL

detected URL: https://scamshield.ai/feedback'

XIOC detected URL: https://scamshield.ai/feedback'

extracted_from_files

URL

detected URL: https://scamshield.ai/upgrade'

XIOC detected URL: https://scamshield.ai/upgrade'

extracted_from_files

URL

detected URL: https://scamshield.ai/privacy'

XIOC detected URL: https://scamshield.ai/privacy'

extracted_from_files

URL

detected URL: https://*.ziprecruiter.com/*

XIOC detected URL: https://*.ziprecruiter.com/*

extracted_from_files

URL

detected URL: https://*.glassdoor.com/*

XIOC detected URL: https://*.glassdoor.com/*

extracted_from_files

URL

detected URL: https://*.monster.com/*

XIOC detected URL: https://*.monster.com/*

extracted_from_files

URL

detected URL: https://*.careerbuilder.com/*

XIOC detected URL: https://*.careerbuilder.com/*

extracted_from_files

URL

detected URL: https://*.dice.com/*

XIOC detected URL: https://*.dice.com/*

extracted_from_files

URL

detected URL: https://*.angel.co/*

XIOC detected URL: https://*.angel.co/*

extracted_from_files

URL

detected URL: https://*.wellfound.com/*

XIOC detected URL: https://*.wellfound.com/*

extracted_from_files

URL

detected URL: https://scamshield.ai/feedback)

XIOC detected URL: https://scamshield.ai/feedback)

extracted_from_files

URL

detected URL: https://github.com/scamshield/extension/issues)

XIOC detected URL: https://github.com/scamshield/extension/issues)

extracted_from_files

URL

detected URL: http://cv.iptc.org/newscodes/digitalsourcetype/trainedAlgorithmicMedia

XIOC detected URL: http://cv.iptc.org/newscodes/digitalsourcetype/trainedAlgorithmicMedia

extracted_from_files

URL

detected URL: http://va.truepic.com/ejbca/publicweb/status/ocsp0

XIOC detected URL: http://va.truepic.com/ejbca/publicweb/status/ocsp0

extracted_from_files

URL

detected URL: https://clients2.google.com/service/update2/crx

XIOC detected URL: https://clients2.google.com/service/update2/crx

extracted_from_files

URL

detected URL: https://*.linkedin.com/*

XIOC detected URL: https://*.linkedin.com/*

extracted_from_files

URL

detected URL: https://*.indeed.com/*

XIOC detected URL: https://*.indeed.com/*

extracted_from_files

Domain

detected Domain: report.id

XIOC detected Domain: report.id

extracted_from_files

Domain

detected Domain: a.download

XIOC detected Domain: a.download

extracted_from_files

Domain

detected Domain: a.click

XIOC detected Domain: a.click

extracted_from_files

Domain

detected Domain: language.name

XIOC detected Domain: language.name

extracted_from_files

Other

detected Email: [email protected]

XIOC detected Email: [email protected]

extracted_from_files

URL

detected URL: https://scamshield.ai/help)

XIOC detected URL: https://scamshield.ai/help)

extracted_from_files

detected IP: ::b

XIOC detected IP: ::b

extracted_from_files

Domain

detected Domain: short.link

XIOC detected Domain: short.link

extracted_from_files

Domain

detected Domain: goo.gl

XIOC detected Domain: goo.gl

extracted_from_files

Domain

detected Domain: e.target

XIOC detected Domain: e.target

extracted_from_files

Domain

detected Domain: settings.analytics

XIOC detected Domain: settings.analytics

extracted_from_files

Domain

detected Domain: reports.map

XIOC detected Domain: reports.map

extracted_from_files

Domain

detected Domain: report.company

XIOC detected Domain: report.company

extracted_from_files

Domain

detected Domain: outlook.com

XIOC detected Domain: outlook.com

extracted_from_files

Domain

detected Domain: aol.com

XIOC detected Domain: aol.com

extracted_from_files

Domain

detected Domain: icloud.com

XIOC detected Domain: icloud.com

extracted_from_files

Domain

detected Domain: protonmail.com

XIOC detected Domain: protonmail.com

extracted_from_files

Domain

detected Domain: jobscam.com

XIOC detected Domain: jobscam.com

extracted_from_files

Domain

detected Domain: fakejobs.net

XIOC detected Domain: fakejobs.net

extracted_from_files

Domain

detected Domain: scamjobs.org

XIOC detected Domain: scamjobs.org

extracted_from_files

Domain

detected Domain: companyinfo.website

XIOC detected Domain: companyinfo.website

extracted_from_files

Domain

detected Domain: jobqualitycheck.indicators.map

XIOC detected Domain: jobqualitycheck.indicators.map

extracted_from_files

Domain

detected Domain: listing.id

XIOC detected Domain: listing.id

extracted_from_files

Domain

detected Domain: checks.map

XIOC detected Domain: checks.map

extracted_from_files

Domain

detected Domain: gmail.com

XIOC detected Domain: gmail.com

extracted_from_files

Domain

detected Domain: yahoo.com

XIOC detected Domain: yahoo.com

extracted_from_files

Domain

detected Domain: hotmail.com

XIOC detected Domain: hotmail.com

extracted_from_files

Domain

detected Domain: alert.company

XIOC detected Domain: alert.company

extracted_from_files

Domain

detected Domain: analysisresults.contact

XIOC detected Domain: analysisresults.contact

extracted_from_files

Domain

detected Domain: analysisresults.company

XIOC detected Domain: analysisresults.company

extracted_from_files

Domain

detected Domain: email.email

XIOC detected Domain: email.email

extracted_from_files

Domain

detected Domain: phone.phone

XIOC detected Domain: phone.phone

extracted_from_files

Domain

detected Domain: riskfactors.contact

XIOC detected Domain: riskfactors.contact

extracted_from_files

Domain

detected Domain: companyinfo.name

XIOC detected Domain: companyinfo.name

extracted_from_files

Domain

detected Domain: analysisresult.id

XIOC detected Domain: analysisresult.id

extracted_from_files

Domain

detected Domain: data.feedback

XIOC detected Domain: data.feedback

extracted_from_files

Domain

detected Domain: clients2.google.com

XIOC detected Domain: clients2.google.com

extracted_from_files

detected Domain: scamshield-extension.zip

XIOC detected Domain: scamshield-extension.zip

extracted_from_files

Domain

detected Domain: tab.id

XIOC detected Domain: tab.id

extracted_from_files

Domain

detected Domain: jobalert.company

XIOC detected Domain: jobalert.company

extracted_from_files

Domain

detected Domain: jobalert.alerts.map

XIOC detected Domain: jobalert.alerts.map

extracted_from_files

Domain

detected Domain: bhj.ph

XIOC detected Domain: bhj.ph

extracted_from_files

Domain

detected Domain: this.analytics

XIOC detected Domain: this.analytics

extracted_from_files

Domain

detected Domain: pattern.id

XIOC detected Domain: pattern.id

extracted_from_files

Domain

detected Domain: date.now

XIOC detected Domain: date.now

extracted_from_files

Domain

detected Domain: data.map

XIOC detected Domain: data.map

extracted_from_files

Domain

detected Domain: mostcommon.map

XIOC detected Domain: mostcommon.map

extracted_from_files

Domain

detected Domain: p.id

XIOC detected Domain: p.id

extracted_from_files

Domain

detected Domain: 0.qa

XIOC detected Domain: 0.qa

extracted_from_files

Domain

detected Domain: 6.us

XIOC detected Domain: 6.us

extracted_from_files

Domain

detected Domain: il钣.tl

XIOC detected Domain: il钣.tl

extracted_from_files

Domain

detected Domain: l.ar

XIOC detected Domain: l.ar

extracted_from_files

Domain

detected Domain: wc.ceb

XIOC detected Domain: wc.ceb

extracted_from_files

Domain

detected Domain: ɏk.ch

XIOC detected Domain: ɏk.ch

extracted_from_files

Domain

detected Domain: e.sr

XIOC detected Domain: e.sr

extracted_from_files

Domain

detected Domain: w.su

XIOC detected Domain: w.su

extracted_from_files

Domain

detected Domain: is.gr

XIOC detected Domain: is.gr

extracted_from_files

Domain

detected Domain: g.mo

XIOC detected Domain: g.mo

extracted_from_files

Domain

detected Domain: ӓ.cv

XIOC detected Domain: ӓ.cv

extracted_from_files

Domain

detected Domain: յ.no

XIOC detected Domain: յ.no

extracted_from_files

Domain

detected Domain: y.se

XIOC detected Domain: y.se

extracted_from_files

Domain

detected Domain: 8.cw

XIOC detected Domain: 8.cw

extracted_from_files

detected Domain: cv.iptc.org

XIOC detected Domain: cv.iptc.org

extracted_from_files

Domain

detected Domain: c2pa.hash.data

XIOC detected Domain: c2pa.hash.data

extracted_from_files

Domain

detected Domain: va.truepic.com

XIOC detected Domain: va.truepic.com

extracted_from_files

Domain

detected Domain: c.cz

XIOC detected Domain: c.cz

extracted_from_files

Domain

detected Domain: bit.ly

XIOC detected Domain: bit.ly

extracted_from_files

Domain

detected Domain: eثdc.cz

XIOC detected Domain: eثdc.cz

extracted_from_files

Domain

detected Domain: r.cz

XIOC detected Domain: r.cz

extracted_from_files

Domain

detected Domain: listing.company

XIOC detected Domain: listing.company

extracted_from_files

Domain

detected Domain: facebook.com

XIOC detected Domain: facebook.com

extracted_from_files

Domain

detected Domain: twitter.com

XIOC detected Domain: twitter.com

extracted_from_files

Domain

detected Domain: instagram.com

XIOC detected Domain: instagram.com

extracted_from_files

Domain

detected Domain: nodefilter.show

XIOC detected Domain: nodefilter.show

extracted_from_files

Domain

detected Domain: jobanalysis.company

XIOC detected Domain: jobanalysis.company

extracted_from_files

Domain

detected Domain: alertstoshow.map

XIOC detected Domain: alertstoshow.map

extracted_from_files

Domain

detected Domain: careerbuilder.com

XIOC detected Domain: careerbuilder.com

extracted_from_files

Domain

detected Domain: dice.com

XIOC detected Domain: dice.com

extracted_from_files

Domain

detected Domain: angel.co

XIOC detected Domain: angel.co

extracted_from_files

Domain

detected Domain: wellfound.com

XIOC detected Domain: wellfound.com

extracted_from_files

Domain

detected Domain: request.data

XIOC detected Domain: request.data

extracted_from_files

Domain

detected Domain: scamdata.company

XIOC detected Domain: scamdata.company

extracted_from_files

Domain

detected Domain: joblisting.company

XIOC detected Domain: joblisting.company

extracted_from_files

Domain

detected Domain: scamshield.ai

XIOC detected Domain: scamshield.ai

extracted_from_files

Domain

detected Domain: alarm.name

XIOC detected Domain: alarm.name

extracted_from_files

Domain

detected Domain: linkedin.com

XIOC detected Domain: linkedin.com

extracted_from_files

Domain

detected Domain: indeed.com

XIOC detected Domain: indeed.com

extracted_from_files

detected Domain: ziprecruiter.com

XIOC detected Domain: ziprecruiter.com

extracted_from_files

Domain

detected Domain: glassdoor.com

XIOC detected Domain: glassdoor.com

extracted_from_files

Domain

detected Domain: monster.com

XIOC detected Domain: monster.com

extracted_from_files

detected IP: ::bef

XIOC detected IP: ::bef

extracted_from_files

detected IP: ed::af

XIOC detected IP: ed::af

extracted_from_files

detected IP: afe::bef

XIOC detected IP: afe::bef

extracted_from_files

detected IP: ::

XIOC detected IP: ::

extracted_from_files

detected IP: ::2

XIOC detected IP: ::2

extracted_from_files

detected IP: ed::bef

XIOC detected IP: ed::bef

extracted_from_files

Security Analysis Summary

Security Analysis Overview

ScamShield - AI Job Scam Detector is a Chrome Web Store extension published by [email protected]. Version 1.0.0 has been analyzed by the Risky Plugins security platform, receiving a risk score of 55.46/100 (MEDIUM risk) based on 162 security findings.

Risk Assessment

This extension presents moderate security risk. Several findings were detected that may warrant attention. Users should carefully review the permissions and findings before installation.

Findings Breakdown

High: 39 finding(s)
Medium: 122 finding(s)
Low: 1 finding(s)

What Was Analyzed

The security assessment covers multiple analysis categories:

Malware Detection: YARA rule matching against 2,400+ malware signatures
Secret Detection: Scanning for exposed API keys, tokens, and credentials
Static Analysis: Code-level security analysis for common vulnerability patterns
Network Analysis: Detection of suspicious network communications and endpoints
Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

ScamShield - AI Job Scam Detector is published by [email protected] on the Chrome Web Store marketplace. The extension has approximately 2 users.

Recommendation

Exercise caution with this extension. Review the detailed findings and ensure the requested permissions align with the extension's stated functionality before installation.

Source Code Viewer

Source Code Not Available

Source code is not available for this version of the extension.

Frequently Asked Questions

Similar Extensions

Related extensions from the same publisher or marketplace

NarrateIt - Convert Web Articles into Audio

[email protected]

CRITICAL

NeuroOS - Turn your browser into a focus zone

[email protected]

HIGH 2 users

What If Invested - Investment Opportunity Calculator

[email protected]

HIGH

BulletBrief

[email protected]

HIGH

JobConnect - The AI-Powered Job Fit Finder

[email protected]

HIGH 7 users

CommentCraft

[email protected]

HIGH

Is "ScamShield - AI Job Scam Detector" on Chrome Web Store Safe to Install?

Risk Assessment

Severity Breakdown

Finding Categories

YARA Rules Matched

Requested Permissions

About This Extension

Detailed Findings

MANIFEST-SENSITIVE-PERM-TABS

DEP-chrome-extension-manifest

YARA Rule Matches

postinstall file manipulation

postinstall system command

postinstall crypto operations

AlertStatementsShouldNotBeUsed

postinstall network communication

postinstall file download

NoUseWeakRandom

Indicators of Compromise

All Indicators · 120

Security Analysis Summary

Security Analysis Overview

Risk Assessment

Findings Breakdown

What Was Analyzed

Developer Information

Recommendation

Frequently Asked Questions

Similar Extensions

NarrateIt - Convert Web Articles into Audio

NeuroOS - Turn your browser into a focus zone

What If Invested - Investment Opportunity Calculator

BulletBrief

JobConnect - The AI-Powered Job Fit Finder

CommentCraft