Is "Substack PDF Downloader: Export Substack to PDF, Markdown, JSON, Text" on Chrome Web Store Safe to Install?

[email protected] · chrome · v1.2.7

Substack PDF Downloader is a productivity focused Chrome extension that lets you save any Substack post as a high-fidelity PDF/MarkDown/JSON/Text with a single click. Perfect for offline reading, research, and long-term archiving. Stop relying on screenshots or unreliable third-party tools. This extension converts articles into clean, beautifully formatted PDFs while preserving layout, images, and links. 🚀 Key Features 📥 One-Click PDF Download Instantly convert the current Substack post into a professionally formatted PDF directly from the page. Other formats include Markdown, JSON, and Text. 📚 Batch Download from Archives (Premium) Download multiple posts from a publication’s archive automatically — ideal for long-form reading or backups. Includes smart "Fast-Forward" technology to instantly skip excluded dates. ☁️ Cloud Sync & Backup (Premium) Automatically upload every downloaded PDF/MarkDown/JSON/Text to your Google Drive, Dropbox, or Yandex Disk. Keep your library safe and accessible from anywhere. 🎨 High-Fidelity Rendering Preserves typography, images, links, and spacing for a true reading experience. 🌙 Smart Light & Dark Mode + Premium Themes Automatically matches your browser’s color scheme. Premium users unlock exclusive themes: OLED (True Black), Cyberpunk, Forest, and Violet. 📂 Custom File Naming Choose how files are named — by title, date, or publication structure. 🧠 Download History & Smart Caching View past downloads and optionally skip posts you’ve already saved. 🔐 Paid Content Support Downloads posts you already have access to using your existing login session. 🌍 Global Support Fully localized in 61 languages with native translations, ensuring a seamless experience for users worldwide. 🧭 How It Works - Open any Substack article - Click the floating Download PDF/MarkDown/JSON/Text button - The post is rendered and saved as a high-quality PDF/MarkDown/JSON/Text automatically 🔒 Privacy & Security - No tracking or analytics - No content scraping beyond the current page - All downloads respect your existing access rights 💡 Ideal For - Newsletter readers and researchers - Writers and editors - Students and academics - Anyone who wants offline access to long-form content 📦 Free & Premium Plans - Free: 10 downloads per day - Weekly Flexible: 150 downloads per day - Monthly Pro: 250 downloads per day + Batch Download + Cloud Sync - Yearly Ultimate: 500 downloads per day + 3 Months Free - Subscriptions can be managed or canceled anytime

Risk Assessment

Analyzed
100
out of 100
CRITICAL

566 security findings detected across all analyzers

Chrome extension requesting 12 permissions

Severity Breakdown

2
Critical
4
High
316
Medium
244
Low
0
Info

Finding Categories

6
Obfuscation
28
Network
285
IoC Indicators

YARA Rules Matched

9 rules(244 hits)
postinstall file download postinstall file manipulation postinstall system command postinstall persistence mechanism postinstall network communication postinstall environment access postinstall obfuscation postinstall crypto operations NoUseWeakRandom

Requested Permissions

12 permissions
https://*/*
Dangerous
identity

Access your identity and sign-in tokens

High
downloads

Manage, modify, and monitor downloads

High
storage
Low
https://*.substack.com/*
Low
https://substack-pdf-backend-sf6mtvli3a-pv.a.run.app/*
Low
https://www.googleapis.com/*
Low
https://content.dropboxapi.com/*
Low
https://api.dropboxapi.com/*
Low
https://cloud-api.yandex.net/*
Low
https://oauth.yandex.com/*
Low
https://oauth.yandex.ru/*
Low

About This Extension

Substack PDF Downloader is a productivity focused Chrome extension that lets you save any Substack post as a high-fidelity PDF/MarkDown/JSON/Text with a single click. Perfect for offline reading, research, and long-term archiving. Stop relying on screenshots or unreliable third-party tools. This extension converts articles into clean, beautifully formatted PDFs while preserving layout, images, and links. 🚀 Key Features 📥 One-Click PDF Download Instantly convert the current Substack post into a professionally formatted PDF directly from the page. Other formats include Markdown, JSON, and Text. 📚 Batch Download from Archives (Premium) Download multiple posts from a publication’s archive automatically — ideal for long-form reading or backups. Includes smart "Fast-Forward" technology to instantly skip excluded dates. ☁️ Cloud Sync & Backup (Premium) Automatically upload every downloaded PDF/MarkDown/JSON/Text to your Google Drive, Dropbox, or Yandex Disk. Keep your library safe and accessible from anywhere. 🎨 High-Fidelity Rendering Preserves typography, images, links, and spacing for a true reading experience. 🌙 Smart Light & Dark Mode + Premium Themes Automatically matches your browser’s color scheme. Premium users unlock exclusive themes: OLED (True Black), Cyberpunk, Forest, and Violet. 📂 Custom File Naming Choose how files are named — by title, date, or publication structure. 🧠 Download History & Smart Caching View past downloads and optionally skip posts you’ve already saved. 🔐 Paid Content Support Downloads posts you already have access to using your existing login session. 🌍 Global Support Fully localized in 61 languages with native translations, ensuring a seamless experience for users worldwide. 🧭 How It Works - Open any Substack article - Click the floating Download PDF/MarkDown/JSON/Text button - The post is rendered and saved as a high-quality PDF/MarkDown/JSON/Text automatically 🔒 Privacy & Security - No tracking or analytics - No content scraping beyond the current page - All downloads respect your existing access rights 💡 Ideal For - Newsletter readers and researchers - Writers and editors - Students and academics - Anyone who wants offline access to long-form content 📦 Free & Premium Plans - Free: 10 downloads per day - Weekly Flexible: 150 downloads per day - Monthly Pro: 250 downloads per day + Batch Download + Cloud Sync - Yearly Ultimate: 500 downloads per day + 3 Months Free - Subscriptions can be managed or canceled anytime

Detailed Findings

278 total

YARA Rule Matches

9 rules

Indicators of Compromise

Network indicators, suspicious strings, and potential IoCs extracted during analysis

URLs
53
IP Addresses
27
Domains
209
Strings
285

All Indicators · 285

Domain
detected Domain: bh.uz

XIOC detected Domain: bh.uz

extracted_from_files

IP
detected IP: c::

XIOC detected IP: c::

extracted_from_files

IP
detected IP: e::

XIOC detected IP: e::

extracted_from_files

IP
detected IP: a::

XIOC detected IP: a::

extracted_from_files

IP
detected IP: 9::

XIOC detected IP: 9::

extracted_from_files

IP
detected IP: 3::

XIOC detected IP: 3::

extracted_from_files

IP
detected IP: 7::

XIOC detected IP: 7::

extracted_from_files

IP
detected IP: ::9

XIOC detected IP: ::9

extracted_from_files

IP
detected IP: ::ae

XIOC detected IP: ::ae

extracted_from_files

IP
detected IP: 5::

XIOC detected IP: 5::

extracted_from_files

IP
detected IP: f::

XIOC detected IP: f::

extracted_from_files

IP
detected IP: 8::

XIOC detected IP: 8::

extracted_from_files

IP
detected IP: ::b

XIOC detected IP: ::b

extracted_from_files

Domain
detected Domain: 5.in

XIOC detected Domain: 5.in

extracted_from_files

Domain
detected Domain: va.truepic.com

XIOC detected Domain: va.truepic.com

extracted_from_files

Domain
detected Domain: c2pa.hash.data

XIOC detected Domain: c2pa.hash.data

extracted_from_files

IP
detected Domain: cv.iptc.org

XIOC detected Domain: cv.iptc.org

extracted_from_files

IP
detected IP: d::bef

XIOC detected IP: d::bef

extracted_from_files

IP
detected IP: 4::

XIOC detected IP: 4::

extracted_from_files

IP
detected IP: ::f

XIOC detected IP: ::f

extracted_from_files

Domain
detected Domain: d.bm

XIOC detected Domain: d.bm

extracted_from_files

Domain
detected Domain: n.mt

XIOC detected Domain: n.mt

extracted_from_files

Domain
detected Domain: յw.ml

XIOC detected Domain: յw.ml

extracted_from_files

Domain
detected Domain: c.eg

XIOC detected Domain: c.eg

extracted_from_files

Domain
detected Domain: hy.kp

XIOC detected Domain: hy.kp

extracted_from_files

Domain
detected Domain: 5.it

XIOC detected Domain: 5.it

extracted_from_files

Domain
detected Domain: 9.mh

XIOC detected Domain: 9.mh

extracted_from_files

Domain
detected Domain: p.gh

XIOC detected Domain: p.gh

extracted_from_files

Domain
detected Domain: jρn.nf

XIOC detected Domain: jρn.nf

extracted_from_files

Domain
detected Domain: a.gd

XIOC detected Domain: a.gd

extracted_from_files

Domain
detected Domain: s.vi

XIOC detected Domain: s.vi

extracted_from_files

Domain
detected Domain: l.mr

XIOC detected Domain: l.mr

extracted_from_files

Domain
detected Domain: ӏv.sx

XIOC detected Domain: ӏv.sx

extracted_from_files

Domain
detected Domain: a.by

XIOC detected Domain: a.by

extracted_from_files

Domain
detected Domain: re.us

XIOC detected Domain: re.us

extracted_from_files

Domain
detected Domain: y.aq

XIOC detected Domain: y.aq

extracted_from_files

Domain
detected Domain: l.ki

XIOC detected Domain: l.ki

extracted_from_files

Domain
detected Domain: 1e.is

XIOC detected Domain: 1e.is

extracted_from_files

Domain
detected Domain: đi.bj

XIOC detected Domain: đi.bj

extracted_from_files

Domain
detected Domain: 3.ms

XIOC detected Domain: 3.ms

extracted_from_files

Domain
detected Domain: kӊ.fm

XIOC detected Domain: kӊ.fm

extracted_from_files

Domain
detected Domain: ߪ6.pe

XIOC detected Domain: ߪ6.pe

extracted_from_files

Domain
detected Domain: v.lv

XIOC detected Domain: v.lv

extracted_from_files

Domain
detected Domain: ώ.et

XIOC detected Domain: ώ.et

extracted_from_files

Domain
detected Domain: n.er

XIOC detected Domain: n.er

extracted_from_files

Domain
detected Domain: q.ck

XIOC detected Domain: q.ck

extracted_from_files

Domain
detected Domain: m.tc

XIOC detected Domain: m.tc

extracted_from_files

Domain
detected Domain: y.gn

XIOC detected Domain: y.gn

extracted_from_files

Domain
detected Domain: s.ca

XIOC detected Domain: s.ca

extracted_from_files

Domain
detected Domain: j.mn

XIOC detected Domain: j.mn

extracted_from_files

Domain
detected Domain: q4.sx

XIOC detected Domain: q4.sx

extracted_from_files

Domain
detected Domain: 3.ph

XIOC detected Domain: 3.ph

extracted_from_files

Domain
detected Domain: b.ml

XIOC detected Domain: b.ml

extracted_from_files

Domain
detected Domain: h.kp

XIOC detected Domain: h.kp

extracted_from_files

Domain
detected Domain: h.pf

XIOC detected Domain: h.pf

extracted_from_files

Domain
detected Domain: u.gr

XIOC detected Domain: u.gr

extracted_from_files

Domain
detected Domain: m.kh

XIOC detected Domain: m.kh

extracted_from_files

Domain
detected Domain: j.kg

XIOC detected Domain: j.kg

extracted_from_files

Domain
detected Domain: ڡ.rs

XIOC detected Domain: ڡ.rs

extracted_from_files

Domain
detected Domain: b.ne

XIOC detected Domain: b.ne

extracted_from_files

Domain
detected Domain: w.eu

XIOC detected Domain: w.eu

extracted_from_files

Domain
detected Domain: w.sg

XIOC detected Domain: w.sg

extracted_from_files

Domain
detected Domain: 3wc.mz

XIOC detected Domain: 3wc.mz

extracted_from_files

Domain
detected Domain: o.cl

XIOC detected Domain: o.cl

extracted_from_files

Domain
detected Domain: vԛq.mr

XIOC detected Domain: vԛq.mr

extracted_from_files

Domain
detected Domain: n.th

XIOC detected Domain: n.th

extracted_from_files

Domain
detected Domain: f.bt

XIOC detected Domain: f.bt

extracted_from_files

Domain
detected Domain: vqy.bio

XIOC detected Domain: vqy.bio

extracted_from_files

Domain
detected Domain: 札uad.sz

XIOC detected Domain: 札uad.sz

extracted_from_files

Domain
detected Domain: ff.se

XIOC detected Domain: ff.se

extracted_from_files

Domain
detected Domain: c.nz

XIOC detected Domain: c.nz

extracted_from_files

Domain
detected Domain: j.su

XIOC detected Domain: j.su

extracted_from_files

Domain
detected Domain: q.mk

XIOC detected Domain: q.mk

extracted_from_files

Domain
detected Domain: lc.eu

XIOC detected Domain: lc.eu

extracted_from_files

IP
detected IP: ::4

XIOC detected IP: ::4

extracted_from_files

Domain
detected Domain: u.bj

XIOC detected Domain: u.bj

extracted_from_files

Domain
detected Domain: chromewebstore.google.com

XIOC detected Domain: chromewebstore.google.com

extracted_from_files

Domain
detected Domain: cdn.buymeacoffee.com

XIOC detected Domain: cdn.buymeacoffee.com

extracted_from_files

Domain
detected Domain: www.buymeacoffee.com

XIOC detected Domain: www.buymeacoffee.com

extracted_from_files

Domain
detected Domain: data.post

XIOC detected Domain: data.post

extracted_from_files

Domain
detected Domain: chrome.downloads.download

XIOC detected Domain: chrome.downloads.download

extracted_from_files

Domain
detected Domain: message.tab

XIOC detected Domain: message.tab

extracted_from_files

Domain
detected Domain: keys.cloud

XIOC detected Domain: keys.cloud

extracted_from_files

Domain
detected Domain: date.now

XIOC detected Domain: date.now

extracted_from_files

Domain
detected Domain: container.id

XIOC detected Domain: container.id

extracted_from_files

Domain
detected Domain: www.substack.com

XIOC detected Domain: www.substack.com

extracted_from_files

Domain
detected Domain: article.post

XIOC detected Domain: article.post

extracted_from_files

Domain
detected Domain: chrome.storage

XIOC detected Domain: chrome.storage

extracted_from_files

Domain
detected Domain: substack-pdf-backend-sf6mtvli3a-pv.a.run.app

XIOC detected Domain: substack-pdf-backend-sf6mtvli3a-pv.a.run.app

extracted_from_files

Domain
detected Domain: chrome.runtime.id

XIOC detected Domain: chrome.runtime.id

extracted_from_files

Domain
detected Domain: n.id

XIOC detected Domain: n.id

extracted_from_files

Domain
detected Domain: result.date

XIOC detected Domain: result.date

extracted_from_files

Domain
detected Domain: hidestyle.id

XIOC detected Domain: hidestyle.id

extracted_from_files

Domain
detected Domain: note.date

XIOC detected Domain: note.date

extracted_from_files

Domain
detected Domain: p.post

XIOC detected Domain: p.post

extracted_from_files

Domain
detected Domain: u.search

XIOC detected Domain: u.search

extracted_from_files

Domain
detected Domain: anchors.map

XIOC detected Domain: anchors.map

extracted_from_files

Domain
detected Domain: obj.id

XIOC detected Domain: obj.id

extracted_from_files

Domain
detected Domain: a.video

XIOC detected Domain: a.video

extracted_from_files

Domain
detected Domain: a.link

XIOC detected Domain: a.link

extracted_from_files

Domain
detected Domain: a.post

XIOC detected Domain: a.post

extracted_from_files

Domain
detected Domain: htmlstr.search

XIOC detected Domain: htmlstr.search

extracted_from_files

Domain
detected Domain: dom.date

XIOC detected Domain: dom.date

extracted_from_files

Domain
detected Domain: note.id

XIOC detected Domain: note.id

extracted_from_files

Domain
detected Domain: c.name

XIOC detected Domain: c.name

extracted_from_files

Domain
detected Domain: c.author

XIOC detected Domain: c.author

extracted_from_files

Domain
detected Domain: c.date

XIOC detected Domain: c.date

extracted_from_files

Domain
detected Domain: obj.name

XIOC detected Domain: obj.name

extracted_from_files

Domain
detected Domain: obj.author

XIOC detected Domain: obj.author

extracted_from_files

Domain
detected Domain: obj.post

XIOC detected Domain: obj.post

extracted_from_files

Domain
detected Domain: obj.date

XIOC detected Domain: obj.date

extracted_from_files

Domain
detected Domain: note.author

XIOC detected Domain: note.author

extracted_from_files

Domain
detected Domain: item.author

XIOC detected Domain: item.author

extracted_from_files

Domain
detected Domain: c.id

XIOC detected Domain: c.id

extracted_from_files

Domain
detected Domain: apidata.name

XIOC detected Domain: apidata.name

extracted_from_files

Domain
detected Domain: apidata.author

XIOC detected Domain: apidata.author

extracted_from_files

Domain
detected Domain: apidata.date

XIOC detected Domain: apidata.date

extracted_from_files

Domain
detected Domain: c.photo

XIOC detected Domain: c.photo

extracted_from_files

Domain
detected Domain: bmclink.target

XIOC detected Domain: bmclink.target

extracted_from_files

Domain
detected Domain: text.style

XIOC detected Domain: text.style

extracted_from_files

Domain
detected Domain: closebtn.style

XIOC detected Domain: closebtn.style

extracted_from_files

Domain
detected Domain: container.style

XIOC detected Domain: container.style

extracted_from_files

Domain
detected Domain: link.style

XIOC detected Domain: link.style

extracted_from_files

Domain
detected Domain: tp.date

XIOC detected Domain: tp.date

extracted_from_files

Domain
detected Domain: p.date

XIOC detected Domain: p.date

extracted_from_files

Domain
detected Domain: btntext.style

XIOC detected Domain: btntext.style

extracted_from_files

Domain
detected Domain: chromeicon.style

XIOC detected Domain: chromeicon.style

extracted_from_files

Domain
detected Domain: cwslink.style

XIOC detected Domain: cwslink.style

extracted_from_files

Domain
detected Domain: cwslink.target

XIOC detected Domain: cwslink.target

extracted_from_files

Domain
detected Domain: cwstext.style

XIOC detected Domain: cwstext.style

extracted_from_files

Domain
detected Domain: bmcimg.style

XIOC detected Domain: bmcimg.style

extracted_from_files

Domain
detected Domain: bmclink.style

XIOC detected Domain: bmclink.style

extracted_from_files

Domain
detected Domain: w.mu

XIOC detected Domain: w.mu

extracted_from_files

Domain
detected Domain: spdf-batch-fab.is

XIOC detected Domain: spdf-batch-fab.is

extracted_from_files

Domain
detected Domain: ns.adobe.com

XIOC detected Domain: ns.adobe.com

extracted_from_files

Domain
detected Domain: footer.id

XIOC detected Domain: footer.id

extracted_from_files

Domain
detected Domain: style.id

XIOC detected Domain: style.id

extracted_from_files

Domain
detected Domain: div.id

XIOC detected Domain: div.id

extracted_from_files

Domain
detected Domain: yw.tc

XIOC detected Domain: yw.tc

extracted_from_files

Domain
detected Domain: l.uy

XIOC detected Domain: l.uy

extracted_from_files

Domain
detected Domain: 4.by

XIOC detected Domain: 4.by

extracted_from_files

Domain
detected Domain: s.kw

XIOC detected Domain: s.kw

extracted_from_files

Domain
detected Domain: o.kz

XIOC detected Domain: o.kz

extracted_from_files

Domain
detected Domain: node.id

XIOC detected Domain: node.id

extracted_from_files

Domain
detected Domain: ռ.wf

XIOC detected Domain: ռ.wf

extracted_from_files

Domain
detected Domain: r.gb

XIOC detected Domain: r.gb

extracted_from_files

IP
detected Domain: iptc.org

XIOC detected Domain: iptc.org

extracted_from_files

Domain
detected Domain: n.rs

XIOC detected Domain: n.rs

extracted_from_files

Domain
detected Domain: b.tl

XIOC detected Domain: b.tl

extracted_from_files

Domain
detected Domain: jm.ec

XIOC detected Domain: jm.ec

extracted_from_files

Domain
detected Domain: c.lr

XIOC detected Domain: c.lr

extracted_from_files

Domain
detected Domain: r.ie

XIOC detected Domain: r.ie

extracted_from_files

Domain
detected Domain: o.it

XIOC detected Domain: o.it

extracted_from_files

Domain
detected Domain: z.gh

XIOC detected Domain: z.gh

extracted_from_files

Domain
detected Domain: 6.cn

XIOC detected Domain: 6.cn

extracted_from_files

Domain
detected Domain: мv.li

XIOC detected Domain: мv.li

extracted_from_files

Domain
detected Domain: l.sk

XIOC detected Domain: l.sk

extracted_from_files

Domain
detected Domain: 2.to

XIOC detected Domain: 2.to

extracted_from_files

Domain
detected Domain: d.am

XIOC detected Domain: d.am

extracted_from_files

Domain
detected Domain: h.mc

XIOC detected Domain: h.mc

extracted_from_files

Domain
detected Domain: g.eg

XIOC detected Domain: g.eg

extracted_from_files

Domain
detected Domain: w.my

XIOC detected Domain: w.my

extracted_from_files

Domain
detected Domain: c.hm

XIOC detected Domain: c.hm

extracted_from_files

Domain
detected Domain: e.py

XIOC detected Domain: e.py

extracted_from_files

Domain
detected Domain: uqw.hn

XIOC detected Domain: uqw.hn

extracted_from_files

Domain
detected Domain: q.gu

XIOC detected Domain: q.gu

extracted_from_files

Domain
detected Domain: browser-polyfill.js.map

XIOC detected Domain: browser-polyfill.js.map

extracted_from_files

Domain
detected Domain: wrapper.call

XIOC detected Domain: wrapper.call

extracted_from_files

Domain
detected Domain: globalthis.browser.runtime.id

XIOC detected Domain: globalthis.browser.runtime.id

extracted_from_files

Domain
detected Domain: globalthis.chrome.runtime.id

XIOC detected Domain: globalthis.chrome.runtime.id

extracted_from_files

Domain
detected Domain: globalthis.chrome

XIOC detected Domain: globalthis.chrome

extracted_from_files

Domain
detected Domain: k.bi

XIOC detected Domain: k.bi

extracted_from_files

Domain
detected Domain: 4r.re

XIOC detected Domain: 4r.re

extracted_from_files

Domain
detected Domain: 124411133147-osuf2dlej8rkf6gg1om38l0ai47phgkk.apps.googleusercontent.com

XIOC detected Domain: 124411133147-osuf2dlej8rkf6gg1om38l0ai47phgkk.apps.googleusercontent.com

extracted_from_files

Domain
detected Domain: archiver.ai

XIOC detected Domain: archiver.ai

extracted_from_files

Domain
detected Domain: oauth.yandex.ru

XIOC detected Domain: oauth.yandex.ru

extracted_from_files

Domain
detected Domain: oauth.yandex.com

XIOC detected Domain: oauth.yandex.com

extracted_from_files

Domain
detected Domain: cloud-api.yandex.net

XIOC detected Domain: cloud-api.yandex.net

extracted_from_files

Domain
detected Domain: api.dropboxapi.com

XIOC detected Domain: api.dropboxapi.com

extracted_from_files

Domain
detected Domain: content.dropboxapi.com

XIOC detected Domain: content.dropboxapi.com

extracted_from_files

Domain
detected Domain: chrome.downloads.show

XIOC detected Domain: chrome.downloads.show

extracted_from_files

Domain
detected Domain: window.open

XIOC detected Domain: window.open

extracted_from_files

Domain
detected Domain: chrome.downloads.open

XIOC detected Domain: chrome.downloads.open

extracted_from_files

Domain
detected Domain: www.neocortexai.in

XIOC detected Domain: www.neocortexai.in

extracted_from_files

Domain
detected Domain: toast-notification.show

XIOC detected Domain: toast-notification.show

extracted_from_files

Domain
detected Domain: li.limited

XIOC detected Domain: li.limited

extracted_from_files

Domain
detected Domain: autosave-indicator.show

XIOC detected Domain: autosave-indicator.show

extracted_from_files

Domain
detected Domain: importfileinput.click

XIOC detected Domain: importfileinput.click

extracted_from_files

Domain
detected Domain: window.location.search

XIOC detected Domain: window.location.search

extracted_from_files

Domain
detected Domain: userdata.email

XIOC detected Domain: userdata.email

extracted_from_files

Domain
detected Domain: payload.email

XIOC detected Domain: payload.email

extracted_from_files

Domain
detected Domain: 124411133147-aq51t60t8h31ph7r9l2c0vcpnhf94rk5.apps.googleusercontent.com

XIOC detected Domain: 124411133147-aq51t60t8h31ph7r9l2c0vcpnhf94rk5.apps.googleusercontent.com

extracted_from_files

Domain
detected Domain: tab.dataset.tab

XIOC detected Domain: tab.dataset.tab

extracted_from_files

Domain
detected Domain: dataset.tab

XIOC detected Domain: dataset.tab

extracted_from_files

Domain
detected Domain: pageitems.map

XIOC detected Domain: pageitems.map

extracted_from_files

Domain
detected Domain: el.id

XIOC detected Domain: el.id

extracted_from_files

Domain
detected Domain: event.target.id

XIOC detected Domain: event.target.id

extracted_from_files

Domain
detected Domain: event.target

XIOC detected Domain: event.target

extracted_from_files

Domain
detected Domain: btn.dataset.id

XIOC detected Domain: btn.dataset.id

extracted_from_files

Domain
detected Domain: item.id

XIOC detected Domain: item.id

extracted_from_files

Domain
detected Domain: cb.dataset.id

XIOC detected Domain: cb.dataset.id

extracted_from_files

Domain
detected Domain: formats.map

XIOC detected Domain: formats.map

extracted_from_files

Domain
detected Domain: f.id

XIOC detected Domain: f.id

extracted_from_files

Domain
detected Domain: toast.show

XIOC detected Domain: toast.show

extracted_from_files

Domain
detected Domain: link.click

XIOC detected Domain: link.click

extracted_from_files

Domain
detected Domain: link.download

XIOC detected Domain: link.download

extracted_from_files

Domain
detected Domain: btn.dataset.page

XIOC detected Domain: btn.dataset.page

extracted_from_files

Domain
detected Domain: iconinfo.bg

XIOC detected Domain: iconinfo.bg

extracted_from_files

Domain
detected Domain: keys.yandex

XIOC detected Domain: keys.yandex

extracted_from_files

Domain
detected Domain: data.id

XIOC detected Domain: data.id

extracted_from_files

Domain
detected Domain: result.id

XIOC detected Domain: result.id

extracted_from_files

Domain
detected Domain: result.name

XIOC detected Domain: result.name

extracted_from_files

Domain
detected Domain: nmdgbflelkmbjonflhecblchpglckegk.chromiumapp.org

XIOC detected Domain: nmdgbflelkmbjonflhecblchpglckegk.chromiumapp.org

extracted_from_files

Domain
detected Domain: www.dropbox.com

XIOC detected Domain: www.dropbox.com

extracted_from_files

IP
detected Domain: billing.stripe.com

XIOC detected Domain: billing.stripe.com

extracted_from_files

IP
detected IP: 43::

XIOC detected IP: 43::

extracted_from_files

Domain
detected Domain: spdf-download-all-btn.is

XIOC detected Domain: spdf-download-all-btn.is

extracted_from_files

Domain
detected Domain: spdf-download-all-btn.pro

XIOC detected Domain: spdf-download-all-btn.pro

extracted_from_files

Domain
detected Domain: disk.info

XIOC detected Domain: disk.info

extracted_from_files

Domain
detected Domain: disk.read

XIOC detected Domain: disk.read

extracted_from_files

URL
detected URL: https://$

XIOC detected URL: https://$

extracted_from_files

URL
detected URL: https://substack-pdf-backend-sf6mtvli3a-pv.a.run.app');

XIOC detected URL: https://substack-pdf-backend-sf6mtvli3a-pv.a.run.app');

extracted_from_files

URL
detected URL: https://substack.com/api/v1/posts/by-id/$

XIOC detected URL: https://substack.com/api/v1/posts/by-id/$

extracted_from_files

URL
detected URL: http://va.truepic.com/ejbca/publicweb/status/ocsp0

XIOC detected URL: http://va.truepic.com/ejbca/publicweb/status/ocsp0

extracted_from_files

Other
detected Email: [email protected]

XIOC detected Email: [email protected]

extracted_from_files

Domain
detected Domain: root.storage

XIOC detected Domain: root.storage

extracted_from_files

IP
detected Domain: buy.stripe.com

XIOC detected Domain: buy.stripe.com

extracted_from_files

URL
detected URL: https://substack.com/note/c-$

XIOC detected URL: https://substack.com/note/c-$

extracted_from_files

URL
detected URL: https://substack.com/@$

XIOC detected URL: https://substack.com/@$

extracted_from_files

URL
detected URL: https://substack.com/api/v1/reader/feed/profile/$

XIOC detected URL: https://substack.com/api/v1/reader/feed/profile/$

extracted_from_files

URL
detected URL: https://substack.com/api/v1/comment/$

XIOC detected URL: https://substack.com/api/v1/comment/$

extracted_from_files

URL
detected URL: https://substack.com/p/$

XIOC detected URL: https://substack.com/p/$

extracted_from_files

URL
detected URL: https://github.com/mozilla/webextension-polyfill/issues/130

XIOC detected URL: https://github.com/mozilla/webextension-polyfill/issues/130

extracted_from_files

URL
detected URL: http://mozilla.org/MPL/2.0/.

XIOC detected URL: http://mozilla.org/MPL/2.0/.

extracted_from_files

URL
detected URL: http://iptc.org/std/Iptc4xmpExt/2008-02-29/

XIOC detected URL: http://iptc.org/std/Iptc4xmpExt/2008-02-29/

extracted_from_files

URL
detected URL: https://chromewebstore.google.com/publisher/neo-cortex-llc/u796c2dce8d71eb1062cca209ec50db80';

XIOC detected URL: https://chromewebstore.google.com/publisher/neo-cortex-llc/u796c2dce8d71eb1062cca209ec50db80';

extracted_from_files

URL
detected URL: https://cdn.buymeacoffee.com/buttons/v2/default-violet.png';

XIOC detected URL: https://cdn.buymeacoffee.com/buttons/v2/default-violet.png';

extracted_from_files

URL
detected URL: https://www.buymeacoffee.com/neocortex';

XIOC detected URL: https://www.buymeacoffee.com/neocortex';

extracted_from_files

URL
detected URL: https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600&display=swap');

XIOC detected URL: https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600&display=swap');

extracted_from_files

URL
detected URL: https://api.dropboxapi.com/*

XIOC detected URL: https://api.dropboxapi.com/*

extracted_from_files

URL
detected URL: https://content.dropboxapi.com/*

XIOC detected URL: https://content.dropboxapi.com/*

extracted_from_files

URL
detected URL: https://www.googleapis.com/*

XIOC detected URL: https://www.googleapis.com/*

extracted_from_files

URL
detected URL: https://substack-pdf-backend-sf6mtvli3a-pv.a.run.app/*

XIOC detected URL: https://substack-pdf-backend-sf6mtvli3a-pv.a.run.app/*

extracted_from_files

URL
detected URL: https://*.substack.com/*

XIOC detected URL: https://*.substack.com/*

extracted_from_files

URL
detected URL: https://www.googleapis.com/auth/drive.file

XIOC detected URL: https://www.googleapis.com/auth/drive.file

extracted_from_files

URL
detected URL: https://clients2.google.com/service/update2/crx

XIOC detected URL: https://clients2.google.com/service/update2/crx

extracted_from_files

URL
detected URL: https://chromewebstore.google.com/detail/substack-pdf-downloader-e/nmdgbflelkmbjonflhecblchpglckegk/reviews';

XIOC detected URL: https://chromewebstore.google.com/detail/substack-pdf-downloader-e/nmdgbflelkmbjonflhecblchpglckegk/reviews';

extracted_from_files

URL
detected URL: https://www.neocortexai.in/#extensions';

XIOC detected URL: https://www.neocortexai.in/#extensions';

extracted_from_files

URL
detected URL: https://chromewebstore.google.com/detail/substack-pdf-downloader-e/nmdgbflelkmbjonflhecblchpglckegk/reviews

XIOC detected URL: https://chromewebstore.google.com/detail/substack-pdf-downloader-e/nmdgbflelkmbjonflhecblchpglckegk/reviews

extracted_from_files

URL
detected URL: https://chromewebstore.google.com/publisher/neo-cortex-llc/u796c2dce8d71eb1062cca209ec50db80

XIOC detected URL: https://chromewebstore.google.com/publisher/neo-cortex-llc/u796c2dce8d71eb1062cca209ec50db80

extracted_from_files

URL
detected URL: https://oauth.yandex.ru/*

XIOC detected URL: https://oauth.yandex.ru/*

extracted_from_files

URL
detected URL: https://oauth.yandex.com/*

XIOC detected URL: https://oauth.yandex.com/*

extracted_from_files

URL
detected URL: https://cloud-api.yandex.net/*

XIOC detected URL: https://cloud-api.yandex.net/*

extracted_from_files

URL
detected URL: https://accounts.google.com/o/oauth2/v2/auth?client_id=$

XIOC detected URL: https://accounts.google.com/o/oauth2/v2/auth?client_id=$

extracted_from_files

URL
detected URL: https://www.neocortexai.in/#extensions'

XIOC detected URL: https://www.neocortexai.in/#extensions'

extracted_from_files

URL
detected URL: https://substack-pdf-backend-sf6mtvli3a-pv.a.run.app';

XIOC detected URL: https://substack-pdf-backend-sf6mtvli3a-pv.a.run.app';

extracted_from_files

URL
detected URL: https://www.buymeacoffee.com/neocortex

XIOC detected URL: https://www.buymeacoffee.com/neocortex

extracted_from_files

URL
detected URL: https://cdn.buymeacoffee.com/buttons/v2/default-violet.png

XIOC detected URL: https://cdn.buymeacoffee.com/buttons/v2/default-violet.png

extracted_from_files

URL
detected URL: https://www.googleapis.com/oauth2/v2/userinfo',

XIOC detected URL: https://www.googleapis.com/oauth2/v2/userinfo',

extracted_from_files

URL
detected URL: https://content.dropboxapi.com/2/files/upload_session/finish',

XIOC detected URL: https://content.dropboxapi.com/2/files/upload_session/finish',

extracted_from_files

URL
detected URL: https://content.dropboxapi.com/2/files/upload_session/start',

XIOC detected URL: https://content.dropboxapi.com/2/files/upload_session/start',

extracted_from_files

URL
detected URL: https://content.dropboxapi.com/2/files/upload',

XIOC detected URL: https://content.dropboxapi.com/2/files/upload',

extracted_from_files

URL
detected URL: https://www.dropbox.com/oauth2/authorize?client_id=$

XIOC detected URL: https://www.dropbox.com/oauth2/authorize?client_id=$

extracted_from_files

URL
detected URL: https://www.googleapis.com/drive/v3/files',

XIOC detected URL: https://www.googleapis.com/drive/v3/files',

extracted_from_files

URL
detected URL: https://www.googleapis.com/drive/v3/files?q=$

XIOC detected URL: https://www.googleapis.com/drive/v3/files?q=$

extracted_from_files

URL
detected URL: https://www.googleapis.com/upload/drive/v3/files?uploadType=multipart',

XIOC detected URL: https://www.googleapis.com/upload/drive/v3/files?uploadType=multipart',

extracted_from_files

URL
detected URL: https://billing.stripe.com/p/login/6oUeVd7ga58t6Zr1g97Zu00';

XIOC detected URL: https://billing.stripe.com/p/login/6oUeVd7ga58t6Zr1g97Zu00';

extracted_from_files

URL
detected URL: https://oauth.yandex.com'];

XIOC detected URL: https://oauth.yandex.com'];

extracted_from_files

URL
detected URL: https://oauth.yandex.ru',

XIOC detected URL: https://oauth.yandex.ru',

extracted_from_files

URL
detected URL: https://nmdgbflelkmbjonflhecblchpglckegk.chromiumapp.org/',

XIOC detected URL: https://nmdgbflelkmbjonflhecblchpglckegk.chromiumapp.org/',

extracted_from_files

URL
detected URL: https://cloud-api.yandex.net/v1/disk/resources/upload?path=$

XIOC detected URL: https://cloud-api.yandex.net/v1/disk/resources/upload?path=$

extracted_from_files

URL
detected URL: https://cloud-api.yandex.net/v1/disk/resources?path=$

XIOC detected URL: https://cloud-api.yandex.net/v1/disk/resources?path=$

extracted_from_files

URL
detected URL: https://content.dropboxapi.com/2/files/upload_session/append_v2',

XIOC detected URL: https://content.dropboxapi.com/2/files/upload_session/append_v2',

extracted_from_files

Hash
detected MD5 Hash: a5b0895203ec4ab4b9a189f4a70de667

XIOC detected MD5 Hash: a5b0895203ec4ab4b9a189f4a70de667

extracted_from_files

Hash
detected MD5 Hash: 8985427993aa4f638bf1a4f151a3d7ad

XIOC detected MD5 Hash: 8985427993aa4f638bf1a4f151a3d7ad

extracted_from_files

Hash
detected MD5 Hash: 7994691d2bec449ba002f46d8b37ab49

XIOC detected MD5 Hash: 7994691d2bec449ba002f46d8b37ab49

extracted_from_files

Hash
detected MD5 Hash: 7c48277541494409a2d5dee230ce0001

XIOC detected MD5 Hash: 7c48277541494409a2d5dee230ce0001

extracted_from_files

URL
detected URL: https://buymeacoffee.com/neocortex';

XIOC detected URL: https://buymeacoffee.com/neocortex';

extracted_from_files

URL
detected URL: https://buy.stripe.com/dRmbJ12ZUbwRgA16At7Zu0M';

XIOC detected URL: https://buy.stripe.com/dRmbJ12ZUbwRgA16At7Zu0M';

extracted_from_files

URL
detected URL: https://buy.stripe.com/bJefZhbwq8kF97z2kd7Zu0L';

XIOC detected URL: https://buy.stripe.com/bJefZhbwq8kF97z2kd7Zu0L';

extracted_from_files

IP
detected IP: ::8

XIOC detected IP: ::8

extracted_from_files

Domain
detected Domain: activetab.id

XIOC detected Domain: activetab.id

extracted_from_files

Domain
detected Domain: k.nz

XIOC detected Domain: k.nz

extracted_from_files

Domain
detected Domain: n.sm

XIOC detected Domain: n.sm

extracted_from_files

Domain
detected Domain: spdf-toast.show

XIOC detected Domain: spdf-toast.show

extracted_from_files

Security Analysis Summary

Security Analysis Overview

Substack PDF Downloader: Export Substack to PDF, Markdown, JSON, Text is a Chrome Web Store extension published by [email protected]. Version 1.2.7 has been analyzed by the Risky Plugins security platform, receiving a risk score of 100/100 (CRITICAL risk) based on 566 security findings.

Risk Assessment

This extension presents critical security risk. Severe issues were detected, potentially including malware indicators, exposed secrets, or dangerous behaviors. Installation is strongly discouraged until these issues are addressed.

Findings Breakdown

  • Critical: 2 finding(s)
  • High: 4 finding(s)
  • Medium: 316 finding(s)
  • Low: 244 finding(s)

What Was Analyzed

The security assessment covers multiple analysis categories:

  • Malware Detection: YARA rule matching against 2,400+ malware signatures
  • Secret Detection: Scanning for exposed API keys, tokens, and credentials
  • Static Analysis: Code-level security analysis for common vulnerability patterns
  • Network Analysis: Detection of suspicious network communications and endpoints
  • Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

Substack PDF Downloader: Export Substack to PDF, Markdown, JSON, Text is published by [email protected] on the Chrome Web Store marketplace. The extension has approximately 969 users.

Recommendation

This extension is not recommended for installation without thorough manual review. Consider alternatives with lower risk scores, or contact the developer to address the identified security concerns.

Frequently Asked Questions