Is "Simple SEO Checker" on Chrome Web Store Safe to Install?

[email protected] · chrome · v2.1.1

The quickest way to check SEO essentials

Risk Assessment

Analyzed
84.93
out of 100
HIGH

39 security findings detected across all analyzers

Chrome extension requesting 4 permissions

Severity Breakdown

0
Critical
16
High
23
Medium
0
Low
0
Info

Finding Categories

16
Malware Signatures
5
Network
17
IoC Indicators

YARA Rules Matched

6 rules(16 hits)
postinstall system command postinstall crypto operations postinstall network communication postinstall file download postinstall file manipulation postinstall obfuscation

Requested Permissions

4 permissions
https://*/*
Dangerous
http://*/*
Dangerous
tabs
Medium
storage
Low

About This Extension

The quickest way to check SEO essentials

Detailed Findings

22 total

YARA Rule Matches

6 rules

Indicators of Compromise

Network indicators, suspicious strings, and potential IoCs extracted during analysis

URLs
1
IP Addresses
1
Domains
16
Strings
17

All Indicators · 17

Domain
detected Domain: package.sh

XIOC detected Domain: package.sh

extracted_from_files

Domain
detected Domain: tab.id

XIOC detected Domain: tab.id

extracted_from_files

URL
detected URL: https://clients2.google.com/service/update2/crx

XIOC detected URL: https://clients2.google.com/service/update2/crx

extracted_from_files

Domain
detected Domain: meta.name

XIOC detected Domain: meta.name

extracted_from_files

Domain
detected Domain: meta.property

XIOC detected Domain: meta.property

extracted_from_files

Domain
detected Domain: label.target

XIOC detected Domain: label.target

extracted_from_files

Domain
detected Domain: textarea.select

XIOC detected Domain: textarea.select

extracted_from_files

Domain
detected Domain: link.target

XIOC detected Domain: link.target

extracted_from_files

Domain
detected Domain: schema.org

XIOC detected Domain: schema.org

extracted_from_files

Domain
detected Domain: stages.map

XIOC detected Domain: stages.map

extracted_from_files

IP
detected Domain: simple-seo-checker-vx.y.z.zip

XIOC detected Domain: simple-seo-checker-vx.y.z.zip

extracted_from_files

Domain
detected Domain: readme.md

XIOC detected Domain: readme.md

extracted_from_files

Domain
detected Domain: changelog.md

XIOC detected Domain: changelog.md

extracted_from_files

Domain
detected Domain: date.now

XIOC detected Domain: date.now

extracted_from_files

Domain
detected Domain: sender.tab.id

XIOC detected Domain: sender.tab.id

extracted_from_files

Domain
detected Domain: message.data

XIOC detected Domain: message.data

extracted_from_files

Domain
detected Domain: clients2.google.com

XIOC detected Domain: clients2.google.com

extracted_from_files

Security Analysis Summary

Security Analysis Overview

Simple SEO Checker is a Chrome Web Store extension published by [email protected]. Version 2.1.1 has been analyzed by the Risky Plugins security platform, receiving a risk score of 84.93/100 (HIGH risk) based on 39 security findings.

Risk Assessment

This extension presents critical security risk. Severe issues were detected, potentially including malware indicators, exposed secrets, or dangerous behaviors. Installation is strongly discouraged until these issues are addressed.

Findings Breakdown

  • High: 16 finding(s)
  • Medium: 23 finding(s)

What Was Analyzed

The security assessment covers multiple analysis categories:

  • Malware Detection: YARA rule matching against 2,400+ malware signatures
  • Secret Detection: Scanning for exposed API keys, tokens, and credentials
  • Static Analysis: Code-level security analysis for common vulnerability patterns
  • Network Analysis: Detection of suspicious network communications and endpoints
  • Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

Simple SEO Checker is published by [email protected] on the Chrome Web Store marketplace. The extension has approximately 1 users.

Recommendation

This extension is not recommended for installation without thorough manual review. Consider alternatives with lower risk scores, or contact the developer to address the identified security concerns.

Frequently Asked Questions