Chrome Web Store
1Versions
0Code reviewed

Not reviewed

No code review on record

We have not reviewed this extension’s code, so we cannot vouch for it either way. Check the permissions below to decide whether it asks for more than it needs.

Want us to read this extension's code? Ask for a review and we'll queue it.

13 indicators in this extension

13 indicators
0 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

What our analysis found

Nehboro is not yet reviewed by Extension Auditor. Its permissions mean it can read and change data on all websites, can inject scripts into pages and can observe network requests. It comes from a publisher with 8 extensions and was last updated in April 2026.

Nehboro

Nehboro Chrome extension security report

ID: ljgklnaofelbcnegjniagpmjknkmaiom

Supported Languages

🇺🇸English

Extension Info & Metadata

Status
Active
Version
1.0.0
Size
0.17 MB
Rating
3.0/5
Reviews
2
Users
8
Type
Extension
Updated
Apr 22, 2026
Category
Privacy & security
Price
Free
Featured
No
Visibility
Listed
Mature
No
By Google
No
Trusted
No
This publisherTrack record
8extensions
All still listed

Publisher Contextual Analysis

Author
mthcht
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
No
Mailbox exists
Yes
Website
Visit
Extensions
8
Active
8
Obsolete
0
Listed
8
Unlisted
0
Users
681

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Screenshots & videos

Screenshot 1
Screenshot 2
Screenshot 3
Screenshot 4
Screenshot 5

Install growth

Item
Type
Severity
Description
declarativeNetRequest
Permission
Critical
This permission allows the extension to define rules to block, redirect, or modify network requests. Rated Critical because it can control all network traffic, potentially blocking security updates or redirecting to malicious sites.
declarativeNetRequestWithHostAccess
Permission
Critical
This permission combines network request modification with host permissions. Rated Critical because it can modify requests for specific domains, potentially targeting sensitive websites with precise attack rules.
webRequest
Permission
Critical
This permission enables the extension to monitor and analyze all web requests made by the browser. Rated Critical because it can observe all network traffic including sensitive data, track browsing behavior, and gather authentication tokens.
scripting
Permission
Critical
This permission allows injection and execution of JavaScript on any webpage. Rated Critical because it can modify page content, steal sensitive data, and inject malicious code into any site the extension has access to.
<all_urls>
Host
Critical
Broad host access — the extension can read/modify content on every website.
Contextual Risk Factors
Risk Factor
High
The following context increases the overall risk:• 10% increase: Early script execution enables pre-emptive content manipulation
Broad Host Permissions
Risk Factor
High
This extension has broad host permissions allowing it to access many or all websites.
Broad Content Script Access
Risk Factor
High
This extension can inject scripts into any website.
tabs
Permission
Medium
This permission enables tab management and monitoring. Rated Medium because it can track open tabs, access tab metadata, and monitor user browsing patterns.
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
https://ntfy.sh/*
Host
Medium
Host permission — access limited to this URL pattern.
Early Content Script Execution
Risk Factor
Medium
This extension runs content scripts at document_start.
alarms
Permission
Low
This permission schedules periodic tasks. Rated Low because it can only trigger events at specified times without access to sensitive data.
notifications
Permission
Low
This permission displays system notifications. Rated Low because it can only show user-visible notifications without accessing system data.
contextMenus
Permission
Low
This permission adds items to browser context menus. Rated Medium because it only modifies right-click menus without access to page content.

13 indicators in this extension

13 indicators
0 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

About this extension

Triple-engine threat protection: IOC feeds, heuristic detections, and optional Claude AI scan every page for phishing scams.

Read the publisher’s full description

Nehboro is a community-powered browser extension that protects users from phishing, ClickFix attacks, tech support scams, crypto drainers, and malware delivery in real time. It runs three detection engines simultaneously: A static IOC engine that blocks known-bad domains, URLs, and IPs before the page loads, using community-maintained threat feeds. A dynamic heuristic engine with 97 pattern-matching detections that analyze every page after load - catching brand-new threats not in any feed yet. An optional Claude AI engine (requires user's own API key) for a second opinion on ambiguous pages. Key features: 97 heuristic detections covering ClickFix sequences, fake CAPTCHAs, PowerShell payloads, LOLBin commands, fake antivirus scans, browser hijacking, clipboard attacks, card skimmers, and more. Detects scam patterns in 6 languages (English, French, Spanish, German, Italian, Portuguese). Silent Mode for non-technical users: dangerous pages are silently closed with no scary dialogs. Community threat reporting: users can report threats that get aggregated into a public threat intelligence feed. Fully transparent: all detection logic is open source, scores are visible, every matched keyword is shown. No telemetry, no tracking, no data collection. All detection runs locally in the browser.

User reviews

Extension files

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs
12
IPv4
1

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found
No IP addresses found

13 indicators in this extension

13 indicators
0 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe
Version
Size
Verdict
Findings
Permhash
1.0.0
Latest
0.17 MBNot scanned—
9d64e792f2f5f0906397a490aaa58e08f74f797bc8d83ebb794e948043d672cb
Showing 1 to 1 of 10 rows
Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.