Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Protecto for Chrome™

CRITICAL RISKRemoved from Chrome Web Store

Protecto for Chrome™

ID: jhigofkbdbndeooldpdhmphldaglejlh

Could be malicious

Supported Languages

🇺🇸US English

Extension Info & Metadata

Status

Removed

Version

0.4.89.5

Size

0.67 MB

Rating

4.3/5

Reviews

Users

200,000

Type

Extension

Updated

May 1, 2025

Publisher Contextual Analysis

Author: https://goprotecto.comView Profile
Privacy: Privacy Policy
Help: Help Center
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: Yes
Mailbox exists: Yes
Website: Visit

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

600,000

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Protecto helps you remove dangerous and malicious extensions that bog down your browser and leave you open to attacks.

Protect your browser from dangerous extensions! Speed up your browser and make it a safer space for all your activities. Finds, reveals, and squashes pesky and malicious extensions hiding in your browser and enhances browsing experience. FAQ: How much does Protecto cost? Protecto is free to use and doesn't require any personal details to sign up. Let us know how we're doing so we can make a better product for you. Do you share any of my information? Why do you request several permissions? We do not collect or share any of your personal information. Your privacy is very important to us. All of the permissions we request are the minimum required to make sure we don't miss any dangerous extension trying to find its way into your browser. How often should I test my extensions? As long as you're following the rules of safe browsing, there's not much to worry about. We suggest a weekly scan, just to be on the safe side. Privacy policy: https://goprotecto.com/privacy.pdf For any questions and issues, contact us at: [email protected]

User Growth

Showing data from Jan 01, 2022 to Dec 31, 2022

Versions

No change in user count

Compared to 3 months ago

2 versions released in this period

Rating Count

Total: 6 ratings+1 (20%)

Average Rating

Current: 3.83 / 5.0-1.17

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical5

High3

Medium0

Low0

Versions scanned

Showing 1 of 4 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
0.1.12.5 Code review	8

Extension Version	Code Review Findings
0.1.12.5	8

Files with findings

1 distinct path — top paths by unique finding count:

protecto.js8

S.No.	Category	Severity	File	Summary	Found in Version
1	Network Interception	critical	protecto.js (line 1)	The extension receives server-defined 'net_conf' configurations that specify URL trigger patterns and actions. When a user visits a URL matching a configured trigger, the extension can execute a 'redirect' or 'iframe'…	0.1.12.5
2	Unauthorized Data Collection	critical	protecto.js (line 1)	The function le() is triggered by the webRequest.onBeforeRequest listener (filter: main_frame, all URLs) and extracts the user's search query from the URL. It then calls Object(E.b)('client_side_search', {keyword: sea…	0.1.12.5
3	Unauthorized Data Collection	critical	protecto.js (line 1)	The extension registers webRequest.onCompleted and onBeforeRequest listeners on ALL URLs and ALL request types. For each request, it builds an item containing the URL, IP address, HTTP method, status code, frame IDs, …	0.1.12.5
4	Unauthorized Data Collection	critical	protecto.js (line 1)	The extension hooks into chrome.management events to monitor every extension the user installs, uninstalls, enables, or disables. Full extension info objects (including IDs, names, permissions) are transmitted to the …	0.1.12.5
5	Unauthorized Data Collection	critical	protecto.js (line 1)	The periodic 'ping' event (sent on a configurable interval) assembles a comprehensive user profile that includes: a unique user ID, list of all installed extensions (via chrome.management.getAll), browser idle state, …	0.1.12.5
6	Code Injection	high	protecto.js (line 1)	A general-purpose chrome.tabs.executeScript wrapper is defined, accepting arbitrary code strings, tab IDs, frame IDs, and run-at timing. Combined with the server-controlled 'net_conf' trigger system that can dispatch …	0.1.12.5
7	Obfuscation	high	protecto.js (line 1)	All data sent to the server can be XOR-encrypted with key 241 (0xF1) and disguised as 'application/octet-stream', making the payload opaque to network inspection tools. The server also responds with XOR-encrypted data…	0.1.12.5
8	Tracking	high	protecto.js (line 1)	The extension reads all cookies named 'profile' across every domain in the browser using chrome.cookies.getAll({name:'profile'}), parses their values as timestamps, and returns a list of domains sorted by visit time. …	0.1.12.5

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


protectohq.com	-	https://protectohq.com
ext.protectohq.com	-	https://ext.protectohq.com
ext.protectoapp.com	-	https://ext.protectoapp.com
unknow.com	-	http://unknow.com
ext.protectohq.com	/src/background.js.f3a8baa5cb3051f3ebcd.map	https://ext.protectohq.com/src/background.js.f3a8baa5cb3051f3ebcd.map
reactjs.org	/docs/error-decoder.html	https://reactjs.org/docs/error-decoder.html?invariant=
www.w3.org	/1999/xlink	http://www.w3.org/1999/xlink
www.w3.org	/XML/1998/namespace	http://www.w3.org/XML/1998/namespace
www.w3.org	/1999/xhtml	http://www.w3.org/1999/xhtml
www.w3.org	/1998/Math/MathML	http://www.w3.org/1998/Math/MathML

Showing 1 to 10 of 20 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


0.4.89.5	IPv4	-

4.6 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

wawwww

araya berhe·8 Jan 2025

Explore new opportunities with us to increase revenue and expand your chrome extension. See how we can help you. Details at: https://extensionbuysell.com We are looking forward to working with you! Best regards,

Madison Francis·20 Sept 2024

I GIVE THIS 5 STARS BECAUSE MYSON IS SO HAPPY HES READDY TO PLAY GEOMETRY DASH SO HAPPY FOR MY BOY

suzie robbins·24 Jul 2024

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Protecto for Chrome™

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 4 Versions8

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating