Is "Inbox4 Clip" on Chrome Web Store Safe to Install?

[email protected] · chrome · v0.1.1

Inbox4 Clip lets you capture anything from the web and store it instantly in your Inbox4 archive. Save full pages, selected text, images, and screenshots with a single click. Everything is sent directly to your Inbox4 account, where it becomes searchable, organized, and ready to use. Why install Inbox4 Clip? • Save entire web pages with title and URL • Capture selected text highlights • Right-click to save images • Take and store screenshots • Send content directly to your Inbox4 dashboard • Keep your research, ideas, and references in one secure place Inbox4 is your AI-powered personal archive. The more you save, the more powerful your knowledge base becomes. To use this extension, you need an Inbox4 account. You can manage your saved content at: https://inbox4.com Privacy & Security: Your content is only sent to your Inbox4 account. The extension does not track browsing activity or collect data beyond what you explicitly choose to save.

Risk Assessment

Analyzed
84.93
out of 100
HIGH

28 security findings detected across all analyzers

Chrome extension requesting 6 permissions

Severity Breakdown

0
Critical
8
High
20
Medium
0
Low
0
Info

Finding Categories

8
Malware Signatures
2
Network
16
IoC Indicators

YARA Rules Matched

6 rules(8 hits)
postinstall crypto operations postinstall network communication postinstall system command postinstall file manipulation postinstall file download postinstall environment access

Requested Permissions

6 permissions
activeTab
Medium
tabs
Medium
contextMenus
Low
scripting
Low
storage
Low
https://inbox4.com/*
Low

About This Extension

Inbox4 Clip lets you capture anything from the web and store it instantly in your Inbox4 archive. Save full pages, selected text, images, and screenshots with a single click. Everything is sent directly to your Inbox4 account, where it becomes searchable, organized, and ready to use. Why install Inbox4 Clip? • Save entire web pages with title and URL • Capture selected text highlights • Right-click to save images • Take and store screenshots • Send content directly to your Inbox4 dashboard • Keep your research, ideas, and references in one secure place Inbox4 is your AI-powered personal archive. The more you save, the more powerful your knowledge base becomes. To use this extension, you need an Inbox4 account. You can manage your saved content at: https://inbox4.com Privacy & Security: Your content is only sent to your Inbox4 account. The extension does not track browsing activity or collect data beyond what you explicitly choose to save.

Detailed Findings

11 total

YARA Rule Matches

6 rules

Indicators of Compromise

Network indicators, suspicious strings, and potential IoCs extracted during analysis

URLs
9
Domains
7
Strings
16

All Indicators · 16

Domain
detected Domain: inbox4.com

XIOC detected Domain: inbox4.com

extracted_from_files

URL
detected URL: https://inbox4.com';

XIOC detected URL: https://inbox4.com';

extracted_from_files

URL
detected URL: https://inbox4.com').replace(/

XIOC detected URL: https://inbox4.com').replace(/

extracted_from_files

URL
detected URL: https://inbox4.com

XIOC detected URL: https://inbox4.com

extracted_from_files

URL
detected URL: https://inbox4.com',

XIOC detected URL: https://inbox4.com',

extracted_from_files

URL
detected URL: http://www.w3.org/1999/02/22-rdf-syntax-ns#

XIOC detected URL: http://www.w3.org/1999/02/22-rdf-syntax-ns#

extracted_from_files

URL
detected URL: http://ns.adobe.com/exif/1.0/

XIOC detected URL: http://ns.adobe.com/exif/1.0/

extracted_from_files

URL
detected URL: http://ns.adobe.com/tiff/1.0/

XIOC detected URL: http://ns.adobe.com/tiff/1.0/

extracted_from_files

URL
detected URL: https://clients2.google.com/service/update2/crx

XIOC detected URL: https://clients2.google.com/service/update2/crx

extracted_from_files

URL
detected URL: https://inbox4.com/*

XIOC detected URL: https://inbox4.com/*

extracted_from_files

Domain
detected Domain: tab.id

XIOC detected Domain: tab.id

extracted_from_files

Domain
detected Domain: ids.page

XIOC detected Domain: ids.page

extracted_from_files

Domain
detected Domain: date.now

XIOC detected Domain: date.now

extracted_from_files

Domain
detected Domain: www.w3.org

XIOC detected Domain: www.w3.org

extracted_from_files

Domain
detected Domain: ns.adobe.com

XIOC detected Domain: ns.adobe.com

extracted_from_files

Domain
detected Domain: clients2.google.com

XIOC detected Domain: clients2.google.com

extracted_from_files

Security Analysis Summary

Security Analysis Overview

Inbox4 Clip is a Chrome Web Store extension published by [email protected]. Version 0.1.1 has been analyzed by the Risky Plugins security platform, receiving a risk score of 84.93/100 (HIGH risk) based on 28 security findings.

Risk Assessment

This extension presents critical security risk. Severe issues were detected, potentially including malware indicators, exposed secrets, or dangerous behaviors. Installation is strongly discouraged until these issues are addressed.

Findings Breakdown

  • High: 8 finding(s)
  • Medium: 20 finding(s)

What Was Analyzed

The security assessment covers multiple analysis categories:

  • Malware Detection: YARA rule matching against 2,400+ malware signatures
  • Secret Detection: Scanning for exposed API keys, tokens, and credentials
  • Static Analysis: Code-level security analysis for common vulnerability patterns
  • Network Analysis: Detection of suspicious network communications and endpoints
  • Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

Inbox4 Clip is published by [email protected] on the Chrome Web Store marketplace.

Recommendation

This extension is not recommended for installation without thorough manual review. Consider alternatives with lower risk scores, or contact the developer to address the identified security concerns.

Frequently Asked Questions

Similar Extensions

Related extensions from the same publisher or marketplace

KPN Password Manager

[email protected]

CRITICAL

MAGgie - An AI Assistant

[email protected]

CRITICAL 1K users

Aintivirus Privacy and Wallet

[email protected]

CRITICAL 46 users

BugZap — Visual Bug Reporter

[email protected]

CRITICAL

FormGenieAI

[email protected]

CRITICAL

OmniChat

[email protected]

CRITICAL 58 users