Is HGT Decode safe?

Clean risk

HGT Decode sends selected decode text over HTTP to hi.pcmoe.net for Bear, Roar, and Buddha decoding.

When you use the decode context-menu action, HGT Decode passes the selected text into its auto-decode routine. Text matching Bear, Roar, or New Buddha decoder prefixes is sent as form data to http://hi.pcmoe.net/bear.php over cleartext HTTP, and the extension also rewrites the request's Origin and Referer headers for that endpoint.

Hoothinv4.3.15Chrome Web Store
0Risk
Who publishes it

Hoothin - 1 other listing from the same operator, none carrying a finding

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
Hoothin

Same store account

1 other listing published from this account, 2k+ users between them, none of them carrying a finding.

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 4.3.15. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on hi.pcmoe.net

    http://hi.pcmoe.net/bear.php

  • Read and change your data on www.keyfc.net

    https://www.keyfc.net/bbs/tools/tudou.aspx

  • Read and change your data on nin10news.com

    https://nin10news.com/wp-content/themes/twentysixteen/inc/decode.php

  • See the address and title of every tab you have open

    tabs

  • Add items to the right-click menu

    contextMenus

  • Block and redirect the requests your browser makes

    declarativeNetRequest

Where it sends data

Destinations our analysis observed HGT Decode contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • hi.pcmoe.net

    HGT Decode sends data to hi.pcmoe.net. No other extension we have analysed sends data here.

Updated 30 September 2026dbheplacgeefjnhdacijldhfliehnhka