Is "RedNote Text Exporter" on Chrome Web Store Safe to Install?

[email protected] · chrome · v0.2.0

📄 RedNote Text Exporter — 小红书图片文字提取工具 在小红书上看到满满当当的长文图片帖，想要记录下来精彩内容却要一张张截图导出识别？ 这个插件帮你一键把图片里的文字提取出来，直接复制或导出文件，再也不用反复截图转写。 ━━━━━━━━━━━━━━━━━━━━━━ 🔍 主要功能 ━━━━━━━━━━━━━━━━━━━━━━ • 自动识别主贴图片 只提取当前帖子的主图内容，自动过滤评论区、推荐区、头像、表情等无关区域。 • 本地 OCR（默认 · 免费 · 无需联网） 使用内置的 Tesseract 引擎在本地完成文字识别，你的图片内容全程不离开你的电脑。 • 云端 OCR（可选 · 更高精度） 如果你有智谱 AI 的 API Key，可以切换到云端 GLM-OCR 引擎获得更好的识别效果。 • GLM 二次优化（可选） 提取完成后，可以一键调用 GLM-4.7-Flash 大模型对散乱的 OCR 文本进行重排、去噪、整理，还原为可读的正文段落。（只需提供智谱的API即可，完全免费，简单申请，注册链接可以点击插件底部） • 三种导出格式 TXT · Markdown · Word，按需选择，文件名自动包含标题与时间戳。 • 结果持久化 关掉侧边栏或切换标签页，提取结果依然保留，下次打开还在，手动点"清空"才会清除。 • 侧边栏常驻 点击工具栏图标即在浏览器右侧打开，处理长帖时不用担心窗口失焦或状态丢失。 • 双语界面 + 两套主题 支持中文 / English 切换，提供 Light 和 Dark 两套皮肤。 ━━━━━━━━━━━━━━━━━━━━━━ 🚀 如何使用 ━━━━━━━━━━━━━━━━━━━━━━ 1. 安装插件后，在小红书 PC 网页版打开任意一篇图片帖 2. 点击浏览器右上角的插件图标，侧边栏自动弹出 3. 页面状态显示"已识别"后，点击【🔍 提取】按钮 4. 等待识别完成，文字结果出现在预览区 5. 按需点击【📋 复制】或选择格式后点击【⬇️ 导出】 如需使用 GLM 二次优化或云端 OCR： → 展开底部"设置"面板 → 填入你的智谱 API Key（可直接点击插件底部链接跳转，或 https://bigmodel.cn/ 免费申请） → 选择 OCR 引擎或勾选"启用大模型本地提取后二次整理" → 点击"保存设置"，之后再提取即可生效 ━━━━━━━━━━━━━━━━━━━━━━ 🔒 隐私与权限说明 ━━━━━━━━━━━━━━━━━━━━━━ • 本插件只在 xiaohongshu.com 域名下工作，不访问其他任何网站 • 本地 OCR 模式下，图片内容全程在本地处理，不会上传到任何服务器 • 你的 API Key 仅保存在 Chrome 本地存储（chrome.storage.sync），不会被发送到除智谱 AI 以外的任何地方 • 插件不收集任何用户数据，不含广告 • 插件本身完全免费，但云端OCR作为可选项是智谱官方收取OCR费用，大约0.01元一张。 ━━━━━━━━━━━━━━━━━━━━━━ ⚙️ 权限说明 ━━━━━━━━━━━━━━━━━━━━━━ • 活动标签页（activeTab）：读取当前打开的小红书页面 • 存储（storage）：保存设置与提取结果 • 下载（downloads）：将结果导出为文件 • 侧边栏（sidePanel）：以侧边栏方式显示界面 ━━━━━━━━━━━━━━━━━━━━━━ 📌 适用场景 ━━━━━━━━━━━━━━━━━━━━━━ ✓ 需要整理小红书上的长文攻略、旅行笔记、学习方法等长文图片帖 ✓ 做内容创作参考、资料收集 ✓ 无障碍阅读需要（图片转文字） ✓ 研究分析小红书内容 ━━━━━━━━━━━━━━━━━━━━━━ Designed by fomocat

Risk Assessment

Analyzed
63.69
out of 100
MEDIUM

386 security findings detected across all analyzers

Chrome extension requesting 8 permissions

Severity Breakdown

0
Critical
0
High
341
Medium
45
Low
0
Info

Finding Categories

2
Network
338
IoC Indicators

YARA Rules Matched

10 rules(45 hits)
postinstall network communication postinstall file download postinstall obfuscation postinstall file manipulation postinstall system command postinstall registry modification postinstall persistence mechanism postinstall crypto operations postinstall environment access NoUseWeakRandom

Requested Permissions

8 permissions
downloads

Manage, modify, and monitor downloads

High
activeTab
Medium
storage
Low
sidePanel
Low
https://www.xiaohongshu.com/*
Low
https://*.xiaohongshu.com/*
Low
https://*.xhscdn.com/*
Low
https://open.bigmodel.cn/*
Low

About This Extension

📄 RedNote Text Exporter — 小红书图片文字提取工具 在小红书上看到满满当当的长文图片帖，想要记录下来精彩内容却要一张张截图导出识别？ 这个插件帮你一键把图片里的文字提取出来，直接复制或导出文件，再也不用反复截图转写。 ━━━━━━━━━━━━━━━━━━━━━━ 🔍 主要功能 ━━━━━━━━━━━━━━━━━━━━━━ • 自动识别主贴图片 只提取当前帖子的主图内容，自动过滤评论区、推荐区、头像、表情等无关区域。 • 本地 OCR（默认 · 免费 · 无需联网） 使用内置的 Tesseract 引擎在本地完成文字识别，你的图片内容全程不离开你的电脑。 • 云端 OCR（可选 · 更高精度） 如果你有智谱 AI 的 API Key，可以切换到云端 GLM-OCR 引擎获得更好的识别效果。 • GLM 二次优化（可选） 提取完成后，可以一键调用 GLM-4.7-Flash 大模型对散乱的 OCR 文本进行重排、去噪、整理，还原为可读的正文段落。（只需提供智谱的API即可，完全免费，简单申请，注册链接可以点击插件底部） • 三种导出格式 TXT · Markdown · Word，按需选择，文件名自动包含标题与时间戳。 • 结果持久化 关掉侧边栏或切换标签页，提取结果依然保留，下次打开还在，手动点"清空"才会清除。 • 侧边栏常驻 点击工具栏图标即在浏览器右侧打开，处理长帖时不用担心窗口失焦或状态丢失。 • 双语界面 + 两套主题 支持中文 / English 切换，提供 Light 和 Dark 两套皮肤。 ━━━━━━━━━━━━━━━━━━━━━━ 🚀 如何使用 ━━━━━━━━━━━━━━━━━━━━━━ 1. 安装插件后，在小红书 PC 网页版打开任意一篇图片帖 2. 点击浏览器右上角的插件图标，侧边栏自动弹出 3. 页面状态显示"已识别"后，点击【🔍 提取】按钮 4. 等待识别完成，文字结果出现在预览区 5. 按需点击【📋 复制】或选择格式后点击【⬇️ 导出】 如需使用 GLM 二次优化或云端 OCR： → 展开底部"设置"面板 → 填入你的智谱 API Key（可直接点击插件底部链接跳转，或 https://bigmodel.cn/ 免费申请） → 选择 OCR 引擎或勾选"启用大模型本地提取后二次整理" → 点击"保存设置"，之后再提取即可生效 ━━━━━━━━━━━━━━━━━━━━━━ 🔒 隐私与权限说明 ━━━━━━━━━━━━━━━━━━━━━━ • 本插件只在 xiaohongshu.com 域名下工作，不访问其他任何网站 • 本地 OCR 模式下，图片内容全程在本地处理，不会上传到任何服务器 • 你的 API Key 仅保存在 Chrome 本地存储（chrome.storage.sync），不会被发送到除智谱 AI 以外的任何地方 • 插件不收集任何用户数据，不含广告 • 插件本身完全免费，但云端OCR作为可选项是智谱官方收取OCR费用，大约0.01元一张。 ━━━━━━━━━━━━━━━━━━━━━━ ⚙️ 权限说明 ━━━━━━━━━━━━━━━━━━━━━━ • 活动标签页（activeTab）：读取当前打开的小红书页面 • 存储（storage）：保存设置与提取结果 • 下载（downloads）：将结果导出为文件 • 侧边栏（sidePanel）：以侧边栏方式显示界面 ━━━━━━━━━━━━━━━━━━━━━━ 📌 适用场景 ━━━━━━━━━━━━━━━━━━━━━━ ✓ 需要整理小红书上的长文攻略、旅行笔记、学习方法等长文图片帖 ✓ 做内容创作参考、资料收集 ✓ 无障碍阅读需要（图片转文字） ✓ 研究分析小红书内容 ━━━━━━━━━━━━━━━━━━━━━━ Designed by fomocat

Detailed Findings

47 total

YARA Rule Matches

10 rules

Indicators of Compromise

Network indicators, suspicious strings, and potential IoCs extracted during analysis

URLs
14
IP Addresses
13
Domains
311
Strings
338

All Indicators · 338

Domain
detected Domain: e.if.cg

XIOC detected Domain: e.if.cg

extracted_from_files

Domain
detected Domain: images.map

XIOC detected Domain: images.map

extracted_from_files

Domain
detected Domain: chrome.downloads.download

XIOC detected Domain: chrome.downloads.download

extracted_from_files

IP
detected IP: ::bac

XIOC detected IP: ::bac

extracted_from_files

IP
detected IP: ::deb

XIOC detected IP: ::deb

extracted_from_files

IP
detected IP: ::f

XIOC detected IP: ::f

extracted_from_files

IP
detected IP: d::a

XIOC detected IP: d::a

extracted_from_files

IP
detected IP: d::c

XIOC detected IP: d::c

extracted_from_files

Domain
detected Domain: left.top

XIOC detected Domain: left.top

extracted_from_files

Domain
detected Domain: deduped.map

XIOC detected Domain: deduped.map

extracted_from_files

Domain
detected Domain: img.media

XIOC detected Domain: img.media

extracted_from_files

Domain
detected Domain: item.top

XIOC detected Domain: item.top

extracted_from_files

Domain
detected Domain: selected.items.map

XIOC detected Domain: selected.items.map

extracted_from_files

Domain
detected Domain: item.items.map

XIOC detected Domain: item.items.map

extracted_from_files

Domain
detected Domain: candidate.items.map

XIOC detected Domain: candidate.items.map

extracted_from_files

Domain
detected Domain: data.channel

XIOC detected Domain: data.channel

extracted_from_files

Domain
detected Domain: event.data

XIOC detected Domain: event.data

extracted_from_files

Domain
detected Domain: date.now

XIOC detected Domain: date.now

extracted_from_files

Domain
detected Domain: current.id

XIOC detected Domain: current.id

extracted_from_files

Domain
detected Domain: rect.top

XIOC detected Domain: rect.top

extracted_from_files

Domain
detected Domain: item.style

XIOC detected Domain: item.style

extracted_from_files

Domain
detected Domain: right.top

XIOC detected Domain: right.top

extracted_from_files

Domain
detected Domain: result.map

XIOC detected Domain: result.map

extracted_from_files

Domain
detected Domain: ocr.recognize.cloud

XIOC detected Domain: ocr.recognize.cloud

extracted_from_files

Domain
detected Domain: parsed.link

XIOC detected Domain: parsed.link

extracted_from_files

Domain
detected Domain: results.map

XIOC detected Domain: results.map

extracted_from_files

Domain
detected Domain: bigmodel.cn

XIOC detected Domain: bigmodel.cn

extracted_from_files

Domain
detected Domain: open.bigmodel.cn

XIOC detected Domain: open.bigmodel.cn

extracted_from_files

Domain
detected Domain: www.xiaohongshu.com

XIOC detected Domain: www.xiaohongshu.com

extracted_from_files

Domain
detected Domain: r.name

XIOC detected Domain: r.name

extracted_from_files

Domain
detected Domain: i.next

XIOC detected Domain: i.next

extracted_from_files

Domain
detected Domain: t.next

XIOC detected Domain: t.next

extracted_from_files

Domain
detected Domain: e.call

XIOC detected Domain: e.call

extracted_from_files

Domain
detected Domain: e.next

XIOC detected Domain: e.next

extracted_from_files

Domain
detected Domain: o.call

XIOC detected Domain: o.call

extracted_from_files

Domain
detected Domain: t.call

XIOC detected Domain: t.call

extracted_from_files

Domain
detected Domain: u.id

XIOC detected Domain: u.id

extracted_from_files

Domain
detected Domain: t.id

XIOC detected Domain: t.id

extracted_from_files

Domain
detected Domain: o.next

XIOC detected Domain: o.next

extracted_from_files

Domain
detected Domain: r.call

XIOC detected Domain: r.call

extracted_from_files

Domain
detected Domain: r.next

XIOC detected Domain: r.next

extracted_from_files

Domain
detected Domain: this.next

XIOC detected Domain: this.next

extracted_from_files

Domain
detected Domain: a.next

XIOC detected Domain: a.next

extracted_from_files

Domain
detected Domain: n.call

XIOC detected Domain: n.call

extracted_from_files

Domain
detected Domain: t.data

XIOC detected Domain: t.data

extracted_from_files

Domain
detected Domain: object.prototype.propertyisenumerable.call

XIOC detected Domain: object.prototype.propertyisenumerable.call

extracted_from_files

Domain
detected Domain: e.id

XIOC detected Domain: e.id

extracted_from_files

Domain
detected Domain: y.id

XIOC detected Domain: y.id

extracted_from_files

Domain
detected Domain: t.constructor.name

XIOC detected Domain: t.constructor.name

extracted_from_files

Domain
detected Domain: object.prototype.tostring.call

XIOC detected Domain: object.prototype.tostring.call

extracted_from_files

Domain
detected Domain: u.green

XIOC detected Domain: u.green

extracted_from_files

Domain
detected Domain: u.blue

XIOC detected Domain: u.blue

extracted_from_files

Domain
detected Domain: this.data

XIOC detected Domain: this.data

extracted_from_files

Domain
detected Domain: this.hr

XIOC detected Domain: this.hr

extracted_from_files

Domain
detected Domain: this.is

XIOC detected Domain: this.is

extracted_from_files

Domain
detected Domain: tesseract.min.js.map

XIOC detected Domain: tesseract.min.js.map

extracted_from_files

Domain
detected Domain: n.next

XIOC detected Domain: n.next

extracted_from_files

Domain
detected Domain: y.red

XIOC detected Domain: y.red

extracted_from_files

Domain
detected Domain: y.green

XIOC detected Domain: y.green

extracted_from_files

Domain
detected Domain: y.blue

XIOC detected Domain: y.blue

extracted_from_files

Domain
detected Domain: r.red

XIOC detected Domain: r.red

extracted_from_files

Domain
detected Domain: r.green

XIOC detected Domain: r.green

extracted_from_files

Domain
detected Domain: r.blue

XIOC detected Domain: r.blue

extracted_from_files

Domain
detected Domain: u.red

XIOC detected Domain: u.red

extracted_from_files

Domain
detected Domain: p.compare

XIOC detected Domain: p.compare

extracted_from_files

Domain
detected Domain: t.foo

XIOC detected Domain: t.foo

extracted_from_files

Domain
detected Domain: uint8array.prototype.lastindexof.call

XIOC detected Domain: uint8array.prototype.lastindexof.call

extracted_from_files

Domain
detected Domain: uint8array.prototype.indexof.call

XIOC detected Domain: uint8array.prototype.indexof.call

extracted_from_files

Domain
detected Domain: h.red

XIOC detected Domain: h.red

extracted_from_files

Domain
detected Domain: h.green

XIOC detected Domain: h.green

extracted_from_files

Domain
detected Domain: h.blue

XIOC detected Domain: h.blue

extracted_from_files

Domain
detected Domain: this.name

XIOC detected Domain: this.name

extracted_from_files

Domain
detected Domain: l.call

XIOC detected Domain: l.call

extracted_from_files

Domain
detected Domain: boolean.prototype.valueof.call

XIOC detected Domain: boolean.prototype.valueof.call

extracted_from_files

Domain
detected Domain: c.read

XIOC detected Domain: c.read

extracted_from_files

Domain
detected Domain: array.prototype.slice.call

XIOC detected Domain: array.prototype.slice.call

extracted_from_files

Domain
detected Domain: p.prototype.compare

XIOC detected Domain: p.prototype.compare

extracted_from_files

Domain
detected Domain: uint8array.prototype.set.call

XIOC detected Domain: uint8array.prototype.set.call

extracted_from_files

Domain
detected Domain: e.data

XIOC detected Domain: e.data

extracted_from_files

Domain
detected Domain: s.data

XIOC detected Domain: s.data

extracted_from_files

Domain
detected Domain: s.name

XIOC detected Domain: s.name

extracted_from_files

Domain
detected Domain: s.ba

XIOC detected Domain: s.ba

extracted_from_files

Domain
detected Domain: i.call

XIOC detected Domain: i.call

extracted_from_files

Domain
detected Domain: e.read

XIOC detected Domain: e.read

extracted_from_files

Domain
detected Domain: e.name

XIOC detected Domain: e.name

extracted_from_files

Domain
detected Domain: t.ril

XIOC detected Domain: t.ril

extracted_from_files

Domain
detected Domain: i.best

XIOC detected Domain: i.best

extracted_from_files

Domain
detected Domain: l.top

XIOC detected Domain: l.top

extracted_from_files

Domain
detected Domain: e.box

XIOC detected Domain: e.box

extracted_from_files

Domain
detected Domain: b.map

XIOC detected Domain: b.map

extracted_from_files

Domain
detected Domain: a.map

XIOC detected Domain: a.map

extracted_from_files

Domain
detected Domain: x.map

XIOC detected Domain: x.map

extracted_from_files

Domain
detected Domain: o.map

XIOC detected Domain: o.map

extracted_from_files

Domain
detected Domain: t.map

XIOC detected Domain: t.map

extracted_from_files

Domain
detected Domain: indexeddb.open

XIOC detected Domain: indexeddb.open

extracted_from_files

Domain
detected Domain: r.box

XIOC detected Domain: r.box

extracted_from_files

Domain
detected Domain: v.next

XIOC detected Domain: v.next

extracted_from_files

Domain
detected Domain: c.next

XIOC detected Domain: c.next

extracted_from_files

Domain
detected Domain: t.is

XIOC detected Domain: t.is

extracted_from_files

Domain
detected Domain: it.it

XIOC detected Domain: it.it

extracted_from_files

Domain
detected Domain: entry.data

XIOC detected Domain: entry.data

extracted_from_files

Domain
detected Domain: other.page

XIOC detected Domain: other.page

extracted_from_files

Domain
detected Domain: s.ps

XIOC detected Domain: s.ps

extracted_from_files

Domain
detected Domain: a.fj

XIOC detected Domain: a.fj

extracted_from_files

Domain
detected Domain: worker.min.js.map

XIOC detected Domain: worker.min.js.map

extracted_from_files

Domain
detected Domain: object.prototype.hasownproperty.call

XIOC detected Domain: object.prototype.hasownproperty.call

extracted_from_files

Domain
detected Domain: chars-4.pa

XIOC detected Domain: chars-4.pa

extracted_from_files

Domain
detected Domain: chars-14.pa

XIOC detected Domain: chars-14.pa

extracted_from_files

Domain
detected Domain: chars-6.pa

XIOC detected Domain: chars-6.pa

extracted_from_files

Domain
detected Domain: chars-16.pa

XIOC detected Domain: chars-16.pa

extracted_from_files

Domain
detected Domain: chars-8.pa

XIOC detected Domain: chars-8.pa

extracted_from_files

Domain
detected Domain: chars-18.pa

XIOC detected Domain: chars-18.pa

extracted_from_files

Domain
detected Domain: it2.data

XIOC detected Domain: it2.data

extracted_from_files

Domain
detected Domain: it.data

XIOC detected Domain: it.data

extracted_from_files

Domain
detected Domain: dir.td

XIOC detected Domain: dir.td

extracted_from_files

Domain
detected Domain: src.int

XIOC detected Domain: src.int

extracted_from_files

Domain
detected Domain: io.int

XIOC detected Domain: io.int

extracted_from_files

Domain
detected Domain: chars-10.pa

XIOC detected Domain: chars-10.pa

extracted_from_files

Domain
detected Domain: chars-20.pa

XIOC detected Domain: chars-20.pa

extracted_from_files

Domain
detected Domain: chars-12.pa

XIOC detected Domain: chars-12.pa

extracted_from_files

Domain
detected Domain: this.tf

XIOC detected Domain: this.tf

extracted_from_files

Domain
detected Domain: this.gg

XIOC detected Domain: this.gg

extracted_from_files

Domain
detected Domain: this.gf

XIOC detected Domain: this.gf

extracted_from_files

Domain
detected Domain: e.open

XIOC detected Domain: e.open

extracted_from_files

Domain
detected Domain: c.open

XIOC detected Domain: c.open

extracted_from_files

Domain
detected Domain: www.leptonica.com

XIOC detected Domain: www.leptonica.com

extracted_from_files

Domain
detected Domain: list.at

XIOC detected Domain: list.at

extracted_from_files

Domain
detected Domain: b.ug

XIOC detected Domain: b.ug

extracted_from_files

Domain
detected Domain: c.zf.file.stream

XIOC detected Domain: c.zf.file.stream

extracted_from_files

Domain
detected Domain: c.zf.dir.stream

XIOC detected Domain: c.zf.dir.stream

extracted_from_files

Domain
detected Domain: c.kf.pg

XIOC detected Domain: c.kf.pg

extracted_from_files

Domain
detected Domain: c.kf.read

XIOC detected Domain: c.kf.read

extracted_from_files

Domain
detected Domain: c.if.cg

XIOC detected Domain: c.if.cg

extracted_from_files

Domain
detected Domain: c.if.wf

XIOC detected Domain: c.if.wf

extracted_from_files

Domain
detected Domain: b.bg

XIOC detected Domain: b.bg

extracted_from_files

Domain
detected Domain: c.si

XIOC detected Domain: c.si

extracted_from_files

Domain
detected Domain: c.ch

XIOC detected Domain: c.ch

extracted_from_files

Domain
detected Domain: a.id

XIOC detected Domain: a.id

extracted_from_files

Domain
detected Domain: c.dev

XIOC detected Domain: c.dev

extracted_from_files

Domain
detected Domain: c.zf.eh.stream

XIOC detected Domain: c.zf.eh.stream

extracted_from_files

Domain
detected Domain: c.zf.link.stream

XIOC detected Domain: c.zf.link.stream

extracted_from_files

Domain
detected Domain: a.parent.id

XIOC detected Domain: a.parent.id

extracted_from_files

Domain
detected Domain: a.qf.th

XIOC detected Domain: a.qf.th

extracted_from_files

Domain
detected Domain: b.ag

XIOC detected Domain: b.ag

extracted_from_files

Domain
detected Domain: b.nf

XIOC detected Domain: b.nf

extracted_from_files

Domain
detected Domain: browser.gg

XIOC detected Domain: browser.gg

extracted_from_files

Domain
detected Domain: a.link

XIOC detected Domain: a.link

extracted_from_files

Domain
detected Domain: a.name

XIOC detected Domain: a.name

extracted_from_files

Domain
detected Domain: a.vg

XIOC detected Domain: a.vg

extracted_from_files

Domain
detected Domain: d.parent.id

XIOC detected Domain: d.parent.id

extracted_from_files

Domain
detected Domain: d.name

XIOC detected Domain: d.name

extracted_from_files

Domain
detected Domain: d.kg

XIOC detected Domain: d.kg

extracted_from_files

Domain
detected Domain: b.ki

XIOC detected Domain: b.ki

extracted_from_files

Domain
detected Domain: c.kg

XIOC detected Domain: c.kg

extracted_from_files

Domain
detected Domain: a.kg

XIOC detected Domain: a.kg

extracted_from_files

Domain
detected Domain: e.kg

XIOC detected Domain: e.kg

extracted_from_files

Domain
detected Domain: h.vg

XIOC detected Domain: h.vg

extracted_from_files

Domain
detected Domain: a.kf.open

XIOC detected Domain: a.kf.open

extracted_from_files

Domain
detected Domain: b.ni

XIOC detected Domain: b.ni

extracted_from_files

Domain
detected Domain: b.mh

XIOC detected Domain: b.mh

extracted_from_files

IP
detected IP: d::

XIOC detected IP: d::

extracted_from_files

Domain
detected Domain: b.sh

XIOC detected Domain: b.sh

extracted_from_files

IP
detected IP: e::c

XIOC detected IP: e::c

extracted_from_files

Domain
detected Domain: g.kf.open

XIOC detected Domain: g.kf.open

extracted_from_files

Domain
detected Domain: b.li

XIOC detected Domain: b.li

extracted_from_files

Domain
detected Domain: b.sg

XIOC detected Domain: b.sg

extracted_from_files

Domain
detected Domain: a.if.wf

XIOC detected Domain: a.if.wf

extracted_from_files

Domain
detected Domain: b.cg

XIOC detected Domain: b.cg

extracted_from_files

Domain
detected Domain: b.tg

XIOC detected Domain: b.tg

extracted_from_files

Domain
detected Domain: b.kh

XIOC detected Domain: b.kh

extracted_from_files

Domain
detected Domain: this.pf

XIOC detected Domain: this.pf

extracted_from_files

Domain
detected Domain: b.read

XIOC detected Domain: b.read

extracted_from_files

Domain
detected Domain: b.open

XIOC detected Domain: b.open

extracted_from_files

Domain
detected Domain: a.kf.tg

XIOC detected Domain: a.kf.tg

extracted_from_files

Domain
detected Domain: a.kf.pg

XIOC detected Domain: a.kf.pg

extracted_from_files

Domain
detected Domain: a.kf.read

XIOC detected Domain: a.kf.read

extracted_from_files

Domain
detected Domain: this.vg

XIOC detected Domain: this.vg

extracted_from_files

Domain
detected Domain: a.ug

XIOC detected Domain: a.ug

extracted_from_files

Domain
detected Domain: e.ag

XIOC detected Domain: e.ag

extracted_from_files

Domain
detected Domain: d.node.name

XIOC detected Domain: d.node.name

extracted_from_files

Domain
detected Domain: b.bh

XIOC detected Domain: b.bh

extracted_from_files

Domain
detected Domain: b.gg.sg

XIOC detected Domain: b.gg.sg

extracted_from_files

Domain
detected Domain: b.gh

XIOC detected Domain: b.gh

extracted_from_files

Domain
detected Domain: b.kg

XIOC detected Domain: b.kg

extracted_from_files

Domain
detected Domain: x.open

XIOC detected Domain: x.open

extracted_from_files

Domain
detected Domain: w.tf

XIOC detected Domain: w.tf

extracted_from_files

Domain
detected Domain: w.gg

XIOC detected Domain: w.gg

extracted_from_files

Domain
detected Domain: q.open

XIOC detected Domain: q.open

extracted_from_files

Domain
detected Domain: h.prototype.gg

XIOC detected Domain: h.prototype.gg

extracted_from_files

Domain
detected Domain: this.ph

XIOC detected Domain: this.ph

extracted_from_files

Domain
detected Domain: 371-l.ng

XIOC detected Domain: 371-l.ng

extracted_from_files

Domain
detected Domain: l.eg

XIOC detected Domain: l.eg

extracted_from_files

Domain
detected Domain: l.bh

XIOC detected Domain: l.bh

extracted_from_files

Domain
detected Domain: l.ng

XIOC detected Domain: l.ng

extracted_from_files

Domain
detected Domain: performance.now

XIOC detected Domain: performance.now

extracted_from_files

Domain
detected Domain: e.dev

XIOC detected Domain: e.dev

extracted_from_files

Domain
detected Domain: v.read

XIOC detected Domain: v.read

extracted_from_files

Domain
detected Domain: g.name

XIOC detected Domain: g.name

extracted_from_files

Domain
detected Domain: return-e.pf

XIOC detected Domain: return-e.pf

extracted_from_files

Domain
detected Domain: return-h.pf

XIOC detected Domain: return-h.pf

extracted_from_files

Domain
detected Domain: h.name

XIOC detected Domain: h.name

extracted_from_files

Domain
detected Domain: this.id

XIOC detected Domain: this.id

extracted_from_files

Domain
detected Domain: l.vi

XIOC detected Domain: l.vi

extracted_from_files

Domain
detected Domain: 7-l.ng

XIOC detected Domain: 7-l.ng

extracted_from_files

Domain
detected Domain: return-t.pf

XIOC detected Domain: return-t.pf

extracted_from_files

Domain
detected Domain: t.name

XIOC detected Domain: t.name

extracted_from_files

Domain
detected Domain: v.gf

XIOC detected Domain: v.gf

extracted_from_files

Domain
detected Domain: return-d.pf

XIOC detected Domain: return-d.pf

extracted_from_files

Domain
detected Domain: return-c.pf

XIOC detected Domain: return-c.pf

extracted_from_files

Domain
detected Domain: c.name

XIOC detected Domain: c.name

extracted_from_files

Domain
detected Domain: return-g.pf

XIOC detected Domain: return-g.pf

extracted_from_files

Domain
detected Domain: f.pf

XIOC detected Domain: f.pf

extracted_from_files

Domain
detected Domain: f.name

XIOC detected Domain: f.name

extracted_from_files

Domain
detected Domain: d.pf

XIOC detected Domain: d.pf

extracted_from_files

Domain
detected Domain: h.call

XIOC detected Domain: h.call

extracted_from_files

Domain
detected Domain: return-v.pf

XIOC detected Domain: return-v.pf

extracted_from_files

Domain
detected Domain: v.name

XIOC detected Domain: v.name

extracted_from_files

Domain
detected Domain: b.pg

XIOC detected Domain: b.pg

extracted_from_files

Domain
detected Domain: b.asm.ma

XIOC detected Domain: b.asm.ma

extracted_from_files

Domain
detected Domain: b.asm.la

XIOC detected Domain: b.asm.la

extracted_from_files

Domain
detected Domain: b.asm.ga

XIOC detected Domain: b.asm.ga

extracted_from_files

Domain
detected Domain: b.asm.ca

XIOC detected Domain: b.asm.ca

extracted_from_files

Domain
detected Domain: b.asm.ba

XIOC detected Domain: b.asm.ba

extracted_from_files

Domain
detected Domain: k.pf

XIOC detected Domain: k.pf

extracted_from_files

Domain
detected Domain: k.name

XIOC detected Domain: k.name

extracted_from_files

Domain
detected Domain: b.asm.za

XIOC detected Domain: b.asm.za

extracted_from_files

Domain
detected Domain: b.asm.va

XIOC detected Domain: b.asm.va

extracted_from_files

Domain
detected Domain: b.asm.ua

XIOC detected Domain: b.asm.ua

extracted_from_files

Domain
detected Domain: b.asm.sa

XIOC detected Domain: b.asm.sa

extracted_from_files

Domain
detected Domain: b.asm.qa

XIOC detected Domain: b.asm.qa

extracted_from_files

Domain
detected Domain: b.asm.pa

XIOC detected Domain: b.asm.pa

extracted_from_files

Domain
detected Domain: b.asm.na

XIOC detected Domain: b.asm.na

extracted_from_files

Domain
detected Domain: b.asm.ec

XIOC detected Domain: b.asm.ec

extracted_from_files

Domain
detected Domain: b.asm.cc

XIOC detected Domain: b.asm.cc

extracted_from_files

Domain
detected Domain: b.asm.ac

XIOC detected Domain: b.asm.ac

extracted_from_files

Domain
detected Domain: b.asm.sb

XIOC detected Domain: b.asm.sb

extracted_from_files

Domain
detected Domain: b.asm.lb

XIOC detected Domain: b.asm.lb

extracted_from_files

Domain
detected Domain: b.asm.gb

XIOC detected Domain: b.asm.gb

extracted_from_files

Domain
detected Domain: b.asm.bb

XIOC detected Domain: b.asm.bb

extracted_from_files

Domain
detected Domain: b.asm.ad

XIOC detected Domain: b.asm.ad

extracted_from_files

Domain
detected Domain: b.asm.vc

XIOC detected Domain: b.asm.vc

extracted_from_files

Domain
detected Domain: b.asm.tc

XIOC detected Domain: b.asm.tc

extracted_from_files

Domain
detected Domain: b.asm.sc

XIOC detected Domain: b.asm.sc

extracted_from_files

Domain
detected Domain: b.asm.nc

XIOC detected Domain: b.asm.nc

extracted_from_files

Domain
detected Domain: b.asm.mc

XIOC detected Domain: b.asm.mc

extracted_from_files

Domain
detected Domain: b.asm.lc

XIOC detected Domain: b.asm.lc

extracted_from_files

Domain
detected Domain: b.asm.td

XIOC detected Domain: b.asm.td

extracted_from_files

Domain
detected Domain: b.asm.sd

XIOC detected Domain: b.asm.sd

extracted_from_files

Domain
detected Domain: b.asm.md

XIOC detected Domain: b.asm.md

extracted_from_files

Domain
detected Domain: b.asm.id

XIOC detected Domain: b.asm.id

extracted_from_files

Domain
detected Domain: b.asm.gd

XIOC detected Domain: b.asm.gd

extracted_from_files

IP
detected IP: ead::

XIOC detected IP: ead::

extracted_from_files

Domain
detected Domain: b.asm.bd

XIOC detected Domain: b.asm.bd

extracted_from_files

Domain
detected Domain: b.asm.je

XIOC detected Domain: b.asm.je

extracted_from_files

IP
detected IP: a::

XIOC detected IP: a::

extracted_from_files

Domain
detected Domain: b.asm.ge

XIOC detected Domain: b.asm.ge

extracted_from_files

Domain
detected Domain: b.asm.ee

XIOC detected Domain: b.asm.ee

extracted_from_files

Domain
detected Domain: b.asm.de

XIOC detected Domain: b.asm.de

extracted_from_files

Domain
detected Domain: b.asm.be

XIOC detected Domain: b.asm.be

extracted_from_files

Domain
detected Domain: b.asm.ae

XIOC detected Domain: b.asm.ae

extracted_from_files

Domain
detected Domain: b.asm.ve

XIOC detected Domain: b.asm.ve

extracted_from_files

Domain
detected Domain: b.asm.se

XIOC detected Domain: b.asm.se

extracted_from_files

Domain
detected Domain: b.asm.re

XIOC detected Domain: b.asm.re

extracted_from_files

Domain
detected Domain: b.asm.pe

XIOC detected Domain: b.asm.pe

extracted_from_files

Domain
detected Domain: b.asm.ne

XIOC detected Domain: b.asm.ne

extracted_from_files

Domain
detected Domain: b.asm.me

XIOC detected Domain: b.asm.me

extracted_from_files

Domain
detected Domain: b.asm.ke

XIOC detected Domain: b.asm.ke

extracted_from_files

Domain
detected Domain: b.asm.pf

XIOC detected Domain: b.asm.pf

extracted_from_files

Domain
detected Domain: b.asm.nf

XIOC detected Domain: b.asm.nf

extracted_from_files

Domain
detected Domain: b.asm.gf

XIOC detected Domain: b.asm.gf

extracted_from_files

Domain
detected Domain: b.asm.cf

XIOC detected Domain: b.asm.cf

extracted_from_files

Domain
detected Domain: b.asm.bf

XIOC detected Domain: b.asm.bf

extracted_from_files

Domain
detected Domain: b.asm.af

XIOC detected Domain: b.asm.af

extracted_from_files

Domain
detected Domain: b.asm.ye

XIOC detected Domain: b.asm.ye

extracted_from_files

Domain
detected Domain: c.gf

XIOC detected Domain: c.gf

extracted_from_files

Domain
detected Domain: b.compare

XIOC detected Domain: b.compare

extracted_from_files

Domain
detected Domain: a.gf

XIOC detected Domain: a.gf

extracted_from_files

Domain
detected Domain: e.gf

XIOC detected Domain: e.gf

extracted_from_files

Domain
detected Domain: b.gg

XIOC detected Domain: b.gg

extracted_from_files

Domain
detected Domain: b.asm.wf

XIOC detected Domain: b.asm.wf

extracted_from_files

Domain
detected Domain: b.asm.tf

XIOC detected Domain: b.asm.tf

extracted_from_files

Domain
detected Domain: o.prototype.next

XIOC detected Domain: o.prototype.next

extracted_from_files

Domain
detected Domain: m.gf

XIOC detected Domain: m.gf

extracted_from_files

Domain
detected Domain: k.gf

XIOC detected Domain: k.gf

extracted_from_files

Domain
detected Domain: h.gf

XIOC detected Domain: h.gf

extracted_from_files

Domain
detected Domain: g.gf

XIOC detected Domain: g.gf

extracted_from_files

Domain
detected Domain: d.gf

XIOC detected Domain: d.gf

extracted_from_files

Domain
detected Domain: l.prototype.next

XIOC detected Domain: l.prototype.next

extracted_from_files

Domain
detected Domain: bi.prototype.next

XIOC detected Domain: bi.prototype.next

extracted_from_files

Domain
detected Domain: p.prototype.ag

XIOC detected Domain: p.prototype.ag

extracted_from_files

Domain
detected Domain: p.prototype.mg

XIOC detected Domain: p.prototype.mg

extracted_from_files

Domain
detected Domain: p.prototype.ng

XIOC detected Domain: p.prototype.ng

extracted_from_files

Domain
detected Domain: p.prototype.pg

XIOC detected Domain: p.prototype.pg

extracted_from_files

Domain
detected Domain: b.box

XIOC detected Domain: b.box

extracted_from_files

Domain
detected Domain: zh.prototype.next

XIOC detected Domain: zh.prototype.next

extracted_from_files

Domain
detected Domain: m.prototype.pg

XIOC detected Domain: m.prototype.pg

extracted_from_files

Domain
detected Domain: m.prototype.ag

XIOC detected Domain: m.prototype.ag

extracted_from_files

Domain
detected Domain: m.prototype.eg

XIOC detected Domain: m.prototype.eg

extracted_from_files

Domain
detected Domain: t.prototype.eg

XIOC detected Domain: t.prototype.eg

extracted_from_files

Domain
detected Domain: s.prototype.ag

XIOC detected Domain: s.prototype.ag

extracted_from_files

Domain
detected Domain: s.prototype.eg

XIOC detected Domain: s.prototype.eg

extracted_from_files

Domain
detected Domain: r.prototype.ai

XIOC detected Domain: r.prototype.ai

extracted_from_files

Domain
detected Domain: n.prototype.gi

XIOC detected Domain: n.prototype.gi

extracted_from_files

Domain
detected Domain: n.prototype.ag

XIOC detected Domain: n.prototype.ag

extracted_from_files

Domain
detected Domain: n.prototype.fi

XIOC detected Domain: n.prototype.fi

extracted_from_files

Domain
detected Domain: n.prototype.ci

XIOC detected Domain: n.prototype.ci

extracted_from_files

Domain
detected Domain: n.prototype.th

XIOC detected Domain: n.prototype.th

extracted_from_files

Domain
detected Domain: n.prototype.mg

XIOC detected Domain: n.prototype.mg

extracted_from_files

Domain
detected Domain: n.prototype.ng

XIOC detected Domain: n.prototype.ng

extracted_from_files

Domain
detected Domain: b.pt

XIOC detected Domain: b.pt

extracted_from_files

Domain
detected Domain: b.ril

XIOC detected Domain: b.ril

extracted_from_files

Domain
detected Domain: z.prototype.ag

XIOC detected Domain: z.prototype.ag

extracted_from_files

Domain
detected Domain: z.prototype.eg

XIOC detected Domain: z.prototype.eg

extracted_from_files

Domain
detected Domain: y.prototype.ph

XIOC detected Domain: y.prototype.ph

extracted_from_files

Domain
detected Domain: n.prototype.sh

XIOC detected Domain: n.prototype.sh

extracted_from_files

Domain
detected Domain: n.prototype.bi

XIOC detected Domain: n.prototype.bi

extracted_from_files

URL
detected URL: https://open.bigmodel.cn

XIOC detected URL: https://open.bigmodel.cn

extracted_from_files

URL
detected URL: https://open.bigmodel.cn/*

XIOC detected URL: https://open.bigmodel.cn/*

extracted_from_files

URL
detected URL: https://*.xhscdn.com/*

XIOC detected URL: https://*.xhscdn.com/*

extracted_from_files

URL
detected URL: https://*.xiaohongshu.com/*

XIOC detected URL: https://*.xiaohongshu.com/*

extracted_from_files

URL
detected URL: https://www.xiaohongshu.com/*

XIOC detected URL: https://www.xiaohongshu.com/*

extracted_from_files

URL
detected URL: https://clients2.google.com/service/update2/crx

XIOC detected URL: https://clients2.google.com/service/update2/crx

extracted_from_files

Domain
detected Domain: this.mg

XIOC detected Domain: this.mg

extracted_from_files

URL
detected URL: https://cdn.jsdelivr.net/npm/tesseract.js@v

XIOC detected URL: https://cdn.jsdelivr.net/npm/tesseract.js@v

extracted_from_files

URL
detected URL: https://open.bigmodel.cn/api/paas/v4/files/ocr

XIOC detected URL: https://open.bigmodel.cn/api/paas/v4/files/ocr

extracted_from_files

URL
detected URL: https://cdn.jsdelivr.net/npm/@tesseract.js-data/chi_sim/4.0.0

XIOC detected URL: https://cdn.jsdelivr.net/npm/@tesseract.js-data/chi_sim/4.0.0

extracted_from_files

URL
detected URL: https://open.bigmodel.cn/api/paas/v4/chat/completions

XIOC detected URL: https://open.bigmodel.cn/api/paas/v4/chat/completions

extracted_from_files

URL
detected URL: https://bigmodel.cn/apikey/platform

XIOC detected URL: https://bigmodel.cn/apikey/platform

extracted_from_files

URL
detected URL: https://cdn.jsdelivr.net;

XIOC detected URL: https://cdn.jsdelivr.net;

extracted_from_files

URL
detected URL: https://cdn.jsdelivr.net/npm/@tesseract.js-data/

XIOC detected URL: https://cdn.jsdelivr.net/npm/@tesseract.js-data/

extracted_from_files

URL
detected URL: https://cdn.jsdelivr.net/npm/tesseract.js-core@v

XIOC detected URL: https://cdn.jsdelivr.net/npm/tesseract.js-core@v

extracted_from_files

IP
detected IP: ::af

XIOC detected IP: ::af

extracted_from_files

IP
detected IP: d::e

XIOC detected IP: d::e

extracted_from_files

IP
detected IP: d::bad

XIOC detected IP: d::bad

extracted_from_files

Domain
detected Domain: b.asm.cd

XIOC detected Domain: b.asm.cd

extracted_from_files

Domain
detected Domain: g.pf

XIOC detected Domain: g.pf

extracted_from_files

IP
detected IP: ea::

XIOC detected IP: ea::

extracted_from_files

Domain
detected Domain: b.asm.ie

XIOC detected Domain: b.asm.ie

extracted_from_files

AI Security Report

AI Security Review

Risky Plugins reviewed this extension with an AI-assisted security workflow on 2026-04-27. The review verdict is confirmed risk with 75% confidence.

Recommended action: monitor.
Risk context: MEDIUM risk, score 64/100.
Evidence context: threat category unknown malware; evidence quality moderate.

RedNote Text Exporter claims to extract text from RedNote (Xiaohongshu/小红书) post images using local OCR with optional GLM-4.7-Flash text cleanup. The extension is published by an anonymous iCloud email address ([email protected]) with zero users and version 0.2.0.

Critical Finding: Suspicious Domain Infrastructure

The most significant concern is the 339 IoC findings pointing to domains that have no legitimate explanation for an OCR extension. Domains include b.asm.za, b.asm.ba, b.asm.ca, b.asm.ga, b.asm.la, b.asm.ma, k.name, k.pf, v.name, b.pg, and return-t.pf. These domains exhibit a pattern consistent with domain generation or infrastructure designed to evade detection. The b.asm.* series with various country-code TLDs is particularly suspicious—legitimate OCR services do not distribute endpoints across dozens of unrelated country domains. None of these domains are CDN infrastructure (gstatic.com, cloudflare.com), Google services, or the extension's own service domain.

Network Activity

The popup.js:1263 file contains a fetch call detected by the NET-FETCH rule. While network calls are expected for extensions that process data, the combination of fetch calls with 339 unexplained domains suggests data transmission to unknown endpoints.

False Positive Considerations

The 45 code-smell findings (low severity) are noise per CVEQ's known false-positive patterns and do not indicate malicious behavior. There are no malware signatures, no obfuscation findings, and no typosquatting indicators—RedNote is a legitimate platform and this extension is not impersonating another extension.

Counterargument Addressed

A skeptic might argue the domains could be legitimate OCR/AI service endpoints or that the high IoC count stems from bundled dependencies. However, the evidence contradicts this: OCR services use stable, documented APIs (not 339 country-code TLD variations), and bundled dependencies would show specific file paths like dist/ or node_modules/ rather than generic extracted_from_files. The domain pattern itself is the smoking gun—no legitimate service operates this way.

Verdict Rationale

Without malware signatures, this cannot be confirmed_malicious. However, the anonymous publisher, zero user adoption, and 339 domains with no legitimate explanation constitute significant risk. The extension's behavior does not match its stated purpose, and the domain infrastructure suggests potential data exfiltration or command-and-control functionality.

Key Reasons

  • 339 suspicious domains with no legitimate service explanation
  • Anonymous developer (iCloud email, no company attribution)
  • Zero user count indicates untested/untrusted extension
  • Domain pattern (b.asm.* with country TLDs) suggests evasion infrastructure
  • Network fetch calls combined with unexplained domain list

False Positive Considerations

  • code-smell findings (45 low-severity items)
  • IoC volume inflation from XIOC extractor

Frequently Asked Questions

Similar Extensions

Related extensions from the same publisher or marketplace

Ship Xanh copy sản phẩm, nhân bản shop, hiển thị % phí sàn, lượt bán tháng

[email protected]

CRITICAL 20K users

SVG to AVIF Converter [ShiftShift]

[email protected]

CRITICAL 4 users

ChromeCompare

[email protected]

CRITICAL 16 users

CAI Tools

[email protected]

CRITICAL 40K users

Auto Gmail - ChatGPT AI for email inbox

[email protected]

CRITICAL 1K users

EC Seller Tools

[email protected]

CRITICAL 1K users