Helps users identify potentially dangerous, phishing, or untrustworthy websites by displaying community-sourced safety ratings (secure/neutral/insecure) for each domain visited

User installs extension → extension anonymously registers with bitcleaner-surfguard.com server → as user browses, extension sends each domain to server via POST request to get community ratings → server returns safety score (green/orange/red) → extension updates browser icon accordingly → user can click popup to view detailed rating breakdown and vote on domain safety themselves → votes are POSTed back to server to update community ratings

Target users: General web users concerned about online safety / Users who want to avoid phishing sites and malicious domains / Users who want to contribute to community-based website safety ratings

The 'pro' keyword false positives from static scan were pervasive but all were substrings of obfuscated variable names (valprotection, safetySysProc, protectionQuick, etc.), not references to premium features
Cannot verify server-side behavior at bitcleaner-surfguard.com — the server could theoretically require authentication or have paid tiers not visible in the extension code
The extension sends tab URLs, titles, and tab IDs to its external server, which is a privacy consideration but not a login/payment concern

Monetization

No paid features detected

No payment UI, billing APIs, subscription logic, premium tiers, or upgrade prompts found anywhere in the source code. The 'pro' keyword matches from static analysis are false positives — they appear inside obfuscated variable names like 'valprotection', 'safetySysProc', 'protectionQuick' which are compound words unrelated to 'pro' plans. All features (viewing ratings, voting, icon status changes) are available without any payment.

Confidence: 95
Payment platform: --
Source: AI / High
Login required: No
Reason: No login UI, authentication code, OAuth flows, or account creation exists in the extension. On first install, the extension anonymously requests an ID from its server (bg.js line 6, 144-146) which is stored locally — no user credentials are involved. The core workflow (viewing domain safety ratings, voting on domain security) works without any account.

Permission risk

High-risk permissions

This estimate uses declared permissions and host permissions to assess access scope and sensitivity.

扩展能力较强：tabs、storage、scripting
主机权限覆盖范围较宽

Publisher

Andre.K.

Independent publisher

Email: [email protected]
Phone: --
Address: --

Public contact fields are shown above. Developer portfolio pages are available on paid accounts.

View developer portfolio

Permissions

Host access