Security Alert: Critical Security Risk

Automated analysis found severe security findings in this version. Review the Security Analysis tab before trusting this extension.Extension: ProfitCentr.com

CRITICAL RISK

ProfitCentr.com

ID: pibmcnpamlghbbmconmceknbiojmbddl

Supported Languages

🇷🇺Russian

Extension Info & Metadata

Status

Active

Version

3.0.4

Size

0.12 MB

Rating

4.7/5

Reviews

571

Users

6,000

Type

Extension

Updated

Mar 27, 2025

Publisher Contextual Analysis

Trusted

Author: profitcentr.comView Profile
Privacy: Privacy Policy
Help: Help Center
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes
Website: Visit

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

6,000

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Зарабатывай реальные деньги на выполнение простых заданий от ProfitCentr.com

Расширение profitcentr для заработка на просмотре роликов Тик-тока, Яндекс Дзена, Ютюба, прослушивании Яндекс музыки. Для начала работы: - Установите расширение и авторизуйтесь под своими учётными данными сервиса Profitcentr. Далее вы будете получать через push-уведомления доступные видеоролики для просмотра. За каждый просмотр вы будете получать реальные деньги которые сможете вывести на электронные платёжные системы.

User Growth

Showing data from May 01, 2025 to Apr 30, 2026

Versions

No change in user count

Compared to 3 months ago

1 version released in this period

Rating Count

Total: 571 ratings

Average Rating

Current: 4.74 / 5.0-0.01

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical2

High6

Medium1

Low0

Versions scanned

Showing 1 of 1 scanned version with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
3.0.4 Code review	9

Extension Version	Code Review Findings
3.0.4	9

Files with findings

4 distinct paths — top paths by unique finding count:

js/background/background.js6
js/content/TikTok.js1
js/content/Youtube.js1
js/popups/login.js1

S.No.	Category	Severity	File	Summary	Found in Version
1	Data Exfiltration	critical	js/content/TikTok.js (line 170)	The `loadUsers` function extracts the authenticated TikTok user's full session profile object from the `#__NEXT_DATA__` script tag (`props.initialProps.$user`), which contains private account details, and transmits it…	3.0.4
2	Data Exfiltration	critical	js/background/background.js (line 839)	When a task is completed, `endTask` sends `data.processUsers` — the TikTok session profile data previously scraped and stored by the content script — to `https://profitcentr.com/api-expansion/` as the `json_users` fie…	3.0.4
3	Code Injection	high	js/background/background.js (line 231)	The background script injects jQuery and a custom notification script into whatever tab is currently active — covering any website the user is browsing — using `chrome.scripting.executeScript`. Combined with the `*://…	3.0.4
4	Code Injection	high	js/background/background.js (line 297)	The `loadJSTask` function dynamically injects one of four different content-script files (TikTok.js, Youtube.js, YaZend.js, YaMusic.js) into the current active tab based on a server-controlled `vType` value. Because `…	3.0.4
5	Code Injection	high	js/content/Youtube.js (line 59)	The `loadRedir` function completely destroys the entire DOM of whatever page the user has open (`$('body').html('')`), replaces it with a crafted anchor element pointing to a server-supplied URL (`inUrl` from the API …	3.0.4
6	Phishing	high	js/background/background.js (line 653)	The `loadTask` function opens new browser tabs or redirects existing tabs to server-supplied URLs (`data.url`, `data.url_start`) received from `https://profitcentr.com/api-expansion/`. This gives the remote server the…	3.0.4
7	Tracking	high	js/background/background.js (line 184)	The extension establishes two persistent alarms that fire every 1 minute and every 5 minutes, each POST-ing the user's authentication token to `https://profitcentr.com/api-expansion/`. This creates a continuously acti…	3.0.4
8	Unauthorized Data Collection	high	js/background/background.js (line 119)	The central `reguestMethod` function sends all data (user tokens, task IDs, scraped user data, abuse reports) to a single remote endpoint `https://profitcentr.com/api-expansion/` and processes server responses that ca…	3.0.4
9	Credential Theft	medium	js/popups/login.js (line 46)	The login form submits the user's plaintext password to `https://profitcentr.com/api-expansion/` via `reguestMethod`. Additionally, lines 15-18 persist the username to `chrome.storage.local` as `login_save` on every k…	3.0.4

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


www.w3.org	/2000/svg	http://www.w3.org/2000/svg
www.w3.org	/1999/02/22-rdf-syntax-ns	http://www.w3.org/1999/02/22-rdf-syntax-ns#
ns.adobe.com	/xap/1.0/	http://ns.adobe.com/xap/1.0/
ns.adobe.com	/xap/1.0/mm/	http://ns.adobe.com/xap/1.0/mm/
ns.adobe.com	/xap/1.0/sType/ResourceRef	http://ns.adobe.com/xap/1.0/sType/ResourceRef#
profitcentr.com	-	https://profitcentr.com
profitcentr.com	/api-expansion/	https://profitcentr.com/api-expansion/
clients2.google.com	/service/update2/crx	https://clients2.google.com/service/update2/crx
purl.org	/dc/elements/1.1/	http://purl.org/dc/elements/1.1/
ns.adobe.com	/photoshop/1.0/	http://ns.adobe.com/photoshop/1.0/

Showing 1 to 10 of 20 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No IP addresses found

2.4 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

не работает...

Novruz ALI-ZADE·25 Dec 2025

Да это помойка - модераторы деньги воруют - заработаные не выплачивают, И трафика у них вообще нет заказывал рекламу на сайт - и аналитику подключил и ноль переходов от реальных пользователей 3 бота заходило и то думаю не от них. НЕ РЕКОМЕНДУЮ СКАМ ТРАФИК. Youtube - просмотры заказал 1800 - да вначале 1600 набежало - но потом их всех youtube вырезал - тут к бабке не ходи ботами накручивают а деньги за рекламу себе в карман ложат.

l l·3 Dec 2025

Расширение не работает толком. Касается, особо "воспроизвести и поставить лайк на Я музыке", запускаешь воспроизведение и ничего дальше не происходит.

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Critical Security Risk

ProfitCentr.com

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

Screenshots & Videos

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 1 Version9

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating