Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Send to Google Maps

CRITICAL RISKRemoved from Chrome Web Store

Send to Google Maps

ID: bhggankplfegmjjngfmhfajedmiikolo

Could be malicious

Supported Languages

🇺🇸English

Extension Info & Metadata

Status

Removed

Version

4.3

Size

0.31 MB

Rating

4.0/5

Reviews

146

Users

51,352

Type

Extension

Updated

Dec 12, 2023

Publisher Contextual Analysis

Trusted

Author: Send To MapsView Profile
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

51,352

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Sends the current text selection with 1-Click to Google Maps.

This extension allows you to send a selected address on any website directly to Google Maps. Therefore the extension adds an item to the Context Menu if text is selected. By right clicking on the selected text the context menu opens and you can choose between different options: - Search for the selected text in Maps - Show your current position in Maps - If you need directions: Just go to the options page and enter up to five favorite addresses. They will be available in the context menu to easily get directions. Also, you can select company names, names of sights and a lot more on any webpage to get directions to. Just try it out! It's not limited to addresses only...

User Growth

Showing data from Jan 01, 2022 to Dec 31, 2022

Versions

-5.62%(-3,055 users)

Compared to 8 months ago

2 versions released in this period

Rating Count

Total: 136 ratings

Average Rating

Current: 4.21 / 5.0-0.20

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical0

High1

Medium2

Low1

Versions scanned

Showing 1 of 8 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
4.0 Code review	4

Extension Version	Code Review Findings
4.0	4

Files with findings

2 distinct paths — top paths by unique finding count:

background.js2
js/sendToGoogleMaps.js2

S.No.	Category	Severity	File	Summary	Found in Version
1	Unauthorized Data Collection	high	background.js (line 317)	Every context-menu / shortcut action (SELECTION, WHERE_AM_I, FAVORITE_*, etc.) silently exfiltrates telemetry to `https://rschli.ch/web/html/stgm/` containing the persistent UserID, action type, Chrome major version, …	4.0
2	Tracking	medium	js/sendToGoogleMaps.js (line 4)	Generates a persistent pseudo-random user identifier (`LS_STORAGE_ID`) and stores it in `chrome.storage.sync` so the same ID survives across sessions and devices. The ID is later attached to every telemetry beacon sen…	4.0
3	Tracking	medium	background.js (line 53)	The user's precise GPS coordinates are obtained via the geolocation API and transmitted in cleartext as a query parameter to `maps.googleapis.com` for reverse-geocoding. Although Google is the receiving endpoint, the …	4.0
4	Other	low	js/sendToGoogleMaps.js (line 2)	A Google Maps Geocoding API key is hard-coded in plaintext and reused in `optionPage_new.js` for autocomplete. While not malicious by itself, the key (`AIzaSyDHgMYXh2c-aAkSvD36P22Hjj1DUD1Zgbo`) is shipped to every use…	4.0

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

245

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


getxmlcprt.com	/config.json	https://getxmlcprt.com/config.json?
intercrpr.com	/config.php	https://intercrpr.com/config.php?
intercrpr.com	/install.php	https://intercrpr.com/install.php
jqueryui.com	-	http://jqueryui.com
jqueryui.com	/themeroller/	http://jqueryui.com/themeroller/?ffDefault=Verdana%2CArial%2Csans-serif&fwDefault=normal&fsDefault=1.1em&cornerRadius=4px&bgColorHeader=cccccc&bgTextureHeader=03_highlight_soft.png&bgImgOpacityHeader=75&borderColorHeader=aaaaaa&fcHeader=222222&iconColorHeader=222222&bgColorContent=ffffff&bgTextureContent=01_flat.png&bgImgOpacityContent=75&borderColorContent=aaaaaa&fcContent=222222&iconColorContent=222222&bgColorDefault=e6e6e6&bgTextureDefault=02_glass.png&bgImgOpacityDefault=75&borderColorDefault=d3d3d3&fcDefault=555555&iconColorDefault=888888&bgColorHover=dadada&bgTextureHover=02_glass.png&bgImgOpacityHover=75&borderColorHover=999999&fcHover=212121&iconColorHover=454545&bgColorActive=ffffff&bgTextureActive=02_glass.png&bgImgOpacityActive=65&borderColorActive=aaaaaa&fcActive=212121&iconColorActive=454545&bgColorHighlight=fbf9ee&bgTextureHighlight=02_glass.png&bgImgOpacityHighlight=55&borderColorHighlight=fcefa1&fcHighlight=363636&iconColorHighlight=2e83ff&bgColorError=fef1ec&bgTextureError=02_glass.png&bgImgOpacityError=95&borderColorError=cd0a0a&fcError=cd0a0a&iconColorError=cd0a0a&bgColorOverlay=aaaaaa&bgTextureOverlay=01_flat.png&bgImgOpacityOverlay=0&opacityOverlay=30&bgColorShadow=aaaaaa&bgTextureShadow=01_flat.png&bgImgOpacityShadow=0&opacityShadow=30&thicknessShadow=8px&offsetTopShadow=-8px&offsetLeftShadow=-8px&cornerRadiusShadow=8px
www.w3.org	/1999/02/22-rdf-syntax-ns	http://www.w3.org/1999/02/22-rdf-syntax-ns#
ns.adobe.com	/tiff/1.0/	http://ns.adobe.com/tiff/1.0/
jquery.com	-	http://jquery.com/
sizzlejs.com	-	http://sizzlejs.com/
jquery.org	/license	http://jquery.org/license

Showing 1 to 10 of 250 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No IP addresses found

1.4 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

It's a good extension but the list of ads tracker that in full view is a turn off. It's good for the short click and google map open but ads on every other page search.

Prince Flomo·21 Dec 2023

Search Hijacker, remove this as it's gonna add a "trending now" section to all your search results on Google.

Tron Guignard·19 Dec 2023

Google Suchergebnis Seite wird manipuliert. Es tauchen Links auf, die auf Bing verweisen: https://gotosearchnow.com/?guid=877e15a82fa0a426bfd4ce9a6d96625e4&ext=7&rdd=15&q=... Das geht gar nicht :-(

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Send to Google Maps

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 8 Versions4

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating