Scan report · 3 months agoPublic

chrome.google.com

216.58.201.174AS15169 · US

Submittedhttps://chrome.google.com/webstore/devconsole

Landed onhttps://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fchrome.google.com%2Fwebstore%2Fdevconsole%2F&dsh=S657580093%3A1784648404327200&followup=https%3A%2F%2Fchrome.google.com%2Fwebstore%2Fdevconsole%2F&osid=1&passive=1209600&service=chromewebstore&flowName=GlifWebSignIn&flowEntry=ServiceLogin&ifkv=Ac50bxveI6xpvAcUbS27Ix_ABK3OQLVpo8FDr7FHgEbMq5qu09LASyCMmJE8W_fuj08H0CxcBAWAGQ· 5 redirects

Verdict

0 of 7 enginesCleanAutomated

Own this site?

Looks safe

Automated

Our automated checks did not find known threat signals on this site at the time of the scan.

What to do

No action needed. Stay alert as usual — a clean result reflects this scan only, and sites can change after they are checked.

A clean result means no known threat signals were found in this scan — it is not an absolute guarantee, and a site can change after it is checked.

Findings

Strongest first

InfoCross-domain scripts injected at runtime

9 script(s)

The page dynamically injected scripts from other domains. This is extremely common on legitimate sites (CDNs, analytics, asset domains) and is shown for context only.

Analyst noteNoisy by itself — a CDN/asset domain (e.g. a brand's own *.githubassets.com) is normal. Only meaningful if the source domain is unrelated/suspicious.

File

Stored by the engine

What you download may be live malware. Open it only in an isolated environment, and do not double-click it.

The ZIP is encrypted. Password:infected

Inside the ZIP the file carries a name the engine generated, not the one the page used.

Downloaded fileCleanThe engine stored it under a generated name

SHA-25632d14868e9c12b31593b7450142511dd150b0b7f91177c68dc94617f40d2e46f

Infrastructure

IP: 216.58.201.174GOOGLE - Google LLC, US · AS15169US
TLS: CN=WR2, O=Google Trust Services, C=US · expires Sep 21, 2026
Redirects: 5 hops · /webstore/devconsole → /v3/signin/identifier?contin…ASyCMmJE8W_fuj08H0CxcBAWAGQ

WHOIS

Registrar: MarkMonitor Inc.
Created: Sep 15, 1997
Expires: Sep 14, 2028
Nameservers: ns1.google.comns2.google.comns3.google.comns4.google.com

6 malicious13 suspicious

Hashes & fingerprints

Page Hashd8f36f58eabf4e564729e5d9a5bcfb834d886185a1b025d5a9e8e6c7951ca058 Favicon Hash6da5620880159634213e197fafca1dde0272153be3e4590818533fab8d040770 DOM Hashce59f67a5b871a4a8e498360ae3fd5d2bee19eb7fd492959bf0e62b9ec307110 Screenshot pHashc39b3c6436cd9263 JARM27d40d40d29d40d1dc42d43d00041ded961c16c68658e95145597cf992c36c JA4Xa373a9f83c6b_7022c563de38_2e3757343cb0 Cert ThumbprintD9DA8130783E9C6B5F9D18520EBE6D522FFB33E0 Cert IssuerCN=WR2, O=Google Trust Services, C=US

Page capture

Live

Title “Chrome Web Store Developer Dashboard”

Visit Site

Engines

7 · time to verdict