English

_ga_KHZNC1Q6K0

__Secure-ENID

html/79/5b/795b854b-a7cf-461a-9cd1-70229cef0164.html.gz

script-src 'report-sample' 'nonce-SyZgts5IfiEWaS6t8Y-nPg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ChromeWebStoreConsumerFeUi/cspreport;worker-src 'self'
script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://www.google.com/tools/feedback/ https://www.gstatic.com/feedback/js/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/ https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://support.google.com/inapp/ https://www.googleapis.com/appsmarket/v2/installedApps/;report-uri /_/ChromeWebStoreConsumerFeUi/cspreport/allowlist
require-trusted-types-for 'script';report-uri /_/ChromeWebStoreConsumerFeUi/cspreport

script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/ https://translate.google.com/translate_a/element.js https://www.youtube.com/iframe_api https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.google.com/tools/feedback/chat_load.js https://www.google.com/tools/feedback/help_api.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.google.com/tools/feedback/open_to_help_guide_lazy.js https://www.gstatic.com/feedback/js/ https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/_/mss/boq-chrome-webstore/_/js/k=boq-chrome-webstore.ChromeWebStoreConsumerFeUi.en_US.-YrFikK-yLE.2018.O/ https://apis.google.com/_/scs/abc-static/_/js/ https://www.youtube.com/s/player/ https://translate.googleapis.com/_/translate_http/_/js/;report-uri /_/ChromeWebStoreConsumerFeUi/cspreport/fine-allowlist

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/boq-infra/chrome-webstore-boq-js-css-signers

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/one-google-eng

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access

application/x-www-form-urlencoded;charset=UTF-8

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/product-feedback-gathering

require-trusted-types-for 'script';report-uri /_/ChromeWebStoreConsumerFeUi/cspreport, script-src 'report-sample' 'nonce-6py0rIBnyfhevDbqPZH8KA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ChromeWebStoreConsumerFeUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://www.google.com/tools/feedback/ https://www.gstatic.com/feedback/js/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/ https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://support.google.com/inapp/ https://www.googleapis.com/appsmarket/v2/installedApps/;report-uri /_/ChromeWebStoreConsumerFeUi/cspreport/allowlist

script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:102:0

object-src 'none';base-uri 'self';script-src 'nonce-ldsi4H-mwZ2pxXk_Izkmdg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/xd3cpp/2
require-trusted-types-for 'script'

script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsgnc:90:0

attachment; filename="response.bin"; filename*=UTF-8''response.bin

require-trusted-types-for 'script';report-uri /_/ChromeWebStoreConsumerFeUi/cspreport

apiproxyfadd8523baad54e4c3012f7e7508e2e6ff3c2d800.1270434093

referrer

viewport

y8ofCL7zPXbfh5-PgY_375n5CS14iEI-on-dmD21tIk

google-site-verification

Automatic Coupons, Points, and Pay Anywhere with Klarna

description

Klarna | Shop now, Pay Later - Chrome Web Store

https://lh3.googleusercontent.com/jllxNUpo-o4W907u3xoPRiMJhoo5Z9EdSiyAaaRuVl516Tux-mb45PaSZAcJUtmRCohYldxuLqeQojBHc1flWUIyNL0=s128-rj-sc0x00ffffff

https://chromewebstore.google.com/detail/klarna-shop-now-pay-later/hfapbcheiepjppjbnkphkmegjlipojba

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

MarkMonitor Inc.

GOOGLE.COM

Abuse

Google LLC

GOOGLE

window['ppConfig'] = {productName: 'ChromeWebStoreConsumerFeUi', deleteIsEnforced:  true , sealIsEnforced:  true , heartbeatRate:  0.5 , periodicReportingRateMillis:  60000.0 , disableAllReporting:  f

window.WIZ_global_data = {"DpimGf":false,"EP1ykd":["/_/*"],"FdrFJe":"2630354860104700503","HiPsbb":1,"Im6cmf":"/_/ChromeWebStoreConsumerFeUi","LVIXXb":1,"LoQv7e":true,"MT7f9b":[],"MUE6Ne":"ChromeWebSt

(function(){'use strict';var a=window,d=a.performance,l=k();a.cc_latency_start_time=d&&d.now?0:d&&d.timing&&d.timing.navigationStart?d.timing.navigationStart:l;function k(){return d&&d.now?d.now():(ne

var _F_cssRowKey = 'boq-chrome-webstore.ChromeWebStoreConsumerFeUi.fIpTGNOtxpU.L.B1.O';var _F_combinedSignature = 'AEP720JagNQkh1SyVH9nAXjwCPx8PeHT_w';function _DumpException(e) {throw e;}

window["_F_toggles_default_ChromeWebStoreConsumerFeUi"] = [0x291c8, 0x2d80c, 0x2, ];

if (window.BOQ_loadedInitialJS) {onJsLoad();} else {document.getElementById('base-js').addEventListener('load', onJsLoad, false);}


    window['_wjdc'] = function (d) {window['_wjdd'] = d};
    

;this.gbar_={CONFIG:[[[0,"www.gstatic.com","og.qtm.en_US.InInzjbyX2s.2019.O","de","en","421",0,[4,2,"","","","809810803","0"],null,"7wjgaNTwN4WB-d8P68rk6AY",null,0,"og.qtm.pfog22aEnAs.L.W.O","AA2YrTth

var AF_initDataKeys = ["ds:0","ds:1"]; var AF_dataServiceRequests = {'ds:0' : {id:'xY2Ddd',request:["hfapbcheiepjppjbnkphkmegjlipojba"]},'ds:1' : {id:'GApdCe',request:["hfapbcheiepjppjbnkphkmegjlipojb

window.wiz_progress&&window.wiz_progress();

this.gbar_=this.gbar_||{};(function(_){var window=this;
try{
_.Cd=function(a,b,c){if(!a.j)if(c instanceof Array)for(var d of c)_.Cd(a,b,d);else{d=(0,_.z)(a.C,a,b);const e=a.v+c;a.v++;b.dataset.eqid=e;

window.wiz_progress&&window.wiz_progress();window.wiz_tick&&window.wiz_tick('Qy2cOb');

(function(){'use strict';var c=window,d=[];c.aft_counter=d;var e=[],f=0;function _recordIsAboveFold(a){if(!c._isLazyImage(a)&&!a.hasAttribute("data-noaft")&&a.src){var b=(c._isVisible||function(){})(c

window.IJ_values = ['webstore-prod-not-live.corp.google.com\/webstore\/adminconsole',[null,null,"",true,null,null,true,false],'0','https:\/\/chromewebstore.google.com\/', null ,'boq_chrome-webstore-co

AF_initDataCallback({key: 'ds:1', hash: '1', data:[], sideChannel: {}});

AF_initDataCallback({key: 'ds:0', hash: '2', data:[["hfapbcheiepjppjbnkphkmegjlipojba","https://lh3.googleusercontent.com/jllxNUpo-o4W907u3xoPRiMJhoo5Z9EdSiyAaaRuVl516Tux-mb45PaSZAcJUtmRCohYldxuLqeQoj

if (window['_wjdc']) {const wjd = {}; window['_wjdc'](wjd); delete window['_wjdc'];}

window.wiz_progress&&window.wiz_progress();window.stopScanForCss&&window.stopScanForCss(); ccTick('bl');

_setImgSrc('i4','https:\/\/lh3.googleusercontent.com\/XFtyWSp2cTv61WXhXzoCdhWi3jVEpo-UmZYuJ2na5DkjIsfsLJ3PZKG2Fh5alvUGWVKeWgxwH5iEmua4GarLwjzJ\x3ds1280-w1280-h800');

_setImgSrc('i5','https:\/\/lh3.googleusercontent.com\/xjc6OXmUpdJwF-xsjEoIB-XDMpQ37XRYOwePKjNELmW0MN5A-y_xTYhoniszaUtLqBn1cvQ0gfsusR9FHlZGcOno\x3ds1280-w1280-h800');

_setImgSrc('i6','https:\/\/lh3.googleusercontent.com\/Ez0oDylCHrK8aPdvrUvpymEpDUGGzNFGs_QT-jzTD290AOy36YKfr3PHcG255wMmZ8ygGc5R8ZwljQoF83I69qppF8o\x3ds1280-w1280-h800');

_setImgSrc('i7','https:\/\/lh3.googleusercontent.com\/RpKGWjUsIist9O3YhwK9pjhm6p5q6lkdvPqrzpssSIzmD2dsiMPY-2Nu1PUYSKcNn_9TT8k_tlMFPcEjaDtGSf-N\x3ds1280-w1280-h800');

_setImgSrc('i8','https:\/\/lh3.googleusercontent.com\/XFtyWSp2cTv61WXhXzoCdhWi3jVEpo-UmZYuJ2na5DkjIsfsLJ3PZKG2Fh5alvUGWVKeWgxwH5iEmua4GarLwjzJ\x3ds1280-w1280-h800');

_setImgSrc('i9','https:\/\/lh3.googleusercontent.com\/xjc6OXmUpdJwF-xsjEoIB-XDMpQ37XRYOwePKjNELmW0MN5A-y_xTYhoniszaUtLqBn1cvQ0gfsusR9FHlZGcOno\x3ds1280-w1280-h800');

_setImgSrc('i10','https:\/\/lh3.googleusercontent.com\/xjc6OXmUpdJwF-xsjEoIB-XDMpQ37XRYOwePKjNELmW0MN5A-y_xTYhoniszaUtLqBn1cvQ0gfsusR9FHlZGcOno\x3ds192-w192-h120');

_setImgSrc('i11','https:\/\/lh3.googleusercontent.com\/Ez0oDylCHrK8aPdvrUvpymEpDUGGzNFGs_QT-jzTD290AOy36YKfr3PHcG255wMmZ8ygGc5R8ZwljQoF83I69qppF8o\x3ds192-w192-h120');

_setImgSrc('i12','https:\/\/lh3.googleusercontent.com\/RpKGWjUsIist9O3YhwK9pjhm6p5q6lkdvPqrzpssSIzmD2dsiMPY-2Nu1PUYSKcNn_9TT8k_tlMFPcEjaDtGSf-N\x3ds192-w192-h120');

_setImgSrc('i13','https:\/\/lh3.googleusercontent.com\/XFtyWSp2cTv61WXhXzoCdhWi3jVEpo-UmZYuJ2na5DkjIsfsLJ3PZKG2Fh5alvUGWVKeWgxwH5iEmua4GarLwjzJ\x3ds192-w192-h120');

this.gbar_=this.gbar_||{};(function(_){var window=this;
try{
var Gd;Gd=class extends _.pd{};_.Hd=function(a,b){if(b in a.i)return a.i[b];throw new Gd;};_.Id=function(a){return _.Hd(_.md.i(),a)};
}catc

HTTP/3

Google

⚠️ High Risk - https://chromewebstore.google.com/detail/klarna-shop-now-pay-later/hfapbcheiepjppjbnkphkmegjlipojba

Requests	IP Address	Location	AS Autonomous System
25	142.250.186.163	United States	AS15169GOOGLE
3	216.239.32.36	United States	AS15169GOOGLE
3	142.250.181.232	United States	AS15169GOOGLE
3	216.58.206.42	United States	AS15169GOOGLE
3	216.58.206.74	United States	AS15169GOOGLE
3	142.250.185.225	United States	AS15169GOOGLE
3	172.217.16.202	United States	AS15169GOOGLE
3	142.250.186.35	United States	AS15169GOOGLE
3	142.250.184.195	United States	AS15169GOOGLE
3	142.250.185.110	United States	AS15169GOOGLE
97	25	-	-

Security Scan Report: chromewebstore.google.com

Summary

AI Security Verdict

Safe Website

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Domain & IP Information

Detected Technologies1

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History