Extract Leads

Extract Leads

ID: bhkibpbnfknollmiebgefgadfkjhnaph

Supported Languages

🇧🇷Brazilian Portuguese

Extension Info & Metadata

Status
Active
Version
6.5
Size
0.98 MB
Rating
5.0/5
Reviews
3
Users
494
Type
Extension
Updated
Apr 8, 2025
Category
Tools
Price
Paid
Featured
No
Visibility
Listed
Mature
No
By Google
No
Trusted
No

Publisher Contextual Analysis

Author
waToolsView Profile
Country
BR
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
No
Mailbox exists
Yes
Address
R. Rio de Janeiro, 243 Belo Horizonte, MG 30160-040 BR
Website
Visit
Total Extensions
3
Active
1
Obsolete
2
Listed
3
Unlisted
0
Total Users
497
Screenshot 1
Screenshot 2
Screenshot 3

Extract Leads e uma ferramenta poderosa que realiza a captura de contatos empresariais

Acelere seu crescimento! Nossa plataforma extrai e organiza leads qualificados para maximizar suas conversões e otimizar suas campanhas de marketing

Item
Type
Severity
Description
unlimitedStorage
Permission
Medium
This permission removes storage quota restrictions. Rated Medium because it can store large amounts of user data without limits, potentially impacting browser performance and storing extensive tracking data.
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
tabs
Permission
Medium
This permission enables tab management and monitoring. Rated Medium because it can track open tabs, access tab metadata, and monitor user browsing patterns.
alarms
Permission
Low
This permission schedules periodic tasks. Rated Low because it can only trigger events at specified times without access to sensitive data.

The CWS listing presents this extension as 'Extract Leads' (a business contact capture tool), but the bundled manifest names it 'BootComp' with a completely different description (WhatsApp CRM). This name/purpose mismatch between what was reviewed and approved by Google versus what is actually distributed is a material misrepresentation that could allow the publisher to pivot the extension's behaviour without re-review. Intentional or not, users installing 'Extract Leads' receive a different product.

manifest.json (Line 1)
{  "manifest_version": 3,  "name": "BootComp",  "description": "BootComp é um CRM para WhatsApp Web. Organize seus chats e otimize seus negócios no WhatsApp Web",  ...  "permissions": [    "unlimitedStorage",    "storage",    "alarms",    "tabs"  ]}

The CWS published manifest omits `unlimitedStorage`, but the bundled manifest includes it. While `unlimitedStorage` is not a high-privilege permission by itself, shipping a permission not declared in the CWS listing means users and Google's review process are not aware the extension acquires this capability. Combined with the name mismatch, this pattern of silent divergence between listing and bundle is a known risk vector.

manifest.json (Line 58)
{  "permissions": [    "unlimitedStorage",    "storage",    "alarms",    "tabs"  ]}

By severity

Critical0
High1
Medium1
Low0

Versions scanned

Showing 1 of 5 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension VersionCode Review Findings
6.52

Files with findings

1 distinct path — top paths by unique finding count:

  • manifest.json2
S.No.
Category
Severity
File
Summary
Found in Version
1Other
high
manifest.json (line 1)The CWS listing presents this extension as 'Extract Leads' (a business contact capture tool), but the bundled manifest names it 'BootComp' with a completely different description (WhatsApp CRM). This name/purpose mism…
2Other
medium
manifest.json (line 58)The CWS published manifest omits `unlimitedStorage`, but the bundled manifest includes it. While `unlimitedStorage` is not a high-privilege permission by itself, shipping a permission not declared in the CWS listing m…
URLs
130
IPv4
58
IPv6
0

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

Gain full insight into all external connections.

Upgrade for full visibility.

web.whatsapp.com-https://web.whatsapp.com/
media-gru1-1.cdn.whatsapp.net-https://media-gru1-1.cdn.whatsapp.net
media-gru2-1.cdn.whatsapp.net-https://media-gru2-1.cdn.whatsapp.net
animate.style-https://animate.style/
opensource.org/licenses/MIThttp://opensource.org/licenses/MIT
edlynvillegas.github.com/evo-calendarhttps://edlynvillegas.github.com/evo-calendar
github.com/edlynvillegas/evo-calendarhttps://github.com/edlynvillegas/evo-calendar
github.com/edlynvillegas/evo-calendar/issueshttps://github.com/edlynvillegas/evo-calendar/issues
www.w3.org/2000/svghttp://www.w3.org/2000/svg
web.whatsapp.com/img/bg-chat-tile-dark_a4be512e7195b6b733d9110b408f075d.pnghttps://web.whatsapp.com/img/bg-chat-tile-dark_a4be512e7195b6b733d9110b408f075d.png
Showing 1 to 10 of 130 rows
Rows per page:

Gain full insight into all external connections.

Upgrade for full visibility.

48.65.1.25
IPv4
-
32.16.5.46
IPv4
-
28.15.64.26
IPv4
-
14.14.37.45
IPv4
-
3.27.15.18
IPv4
-
3.27.15.19
IPv4
-
2.48.72.64
IPv4
-
35.74.17.17
IPv4
-
22.88.19.12
IPv4
-
35.67.89.89
IPv4
-
46.11.68.68
IPv4
-
82.82.82.82
IPv4
-
19.22.16.16
IPv4
-
61.14.83.83
IPv4
-
3.84.61.61
IPv4
-
1.11.29.8
IPv4
-
1.11.3.8
IPv4
-
1.1.29.81
IPv4
-
1.1.29.8
IPv4
-
45.27.65.6
IPv4
-
2.38.94.94
IPv4
-
2.46.81.81
IPv4
-
14.58.81.81
IPv4
-
13.57.86.86
IPv4
-
13.57.91.91
IPv4
-
11.47.72.72
IPv4
-
11.47.8.8
IPv4
-
14.57.86.86
IPv4
-
35.37.87.36
IPv4
-
11.43.66.66
IPv4
-
1.44.65.65
IPv4
-
14.41.8.8
IPv4
-
11.44.59.59
IPv4
-
1.43.67.67
IPv4
-
11.44.76.76
IPv4
-
11.44.63.63
IPv4
-
37.31.85.29
IPv4
-
1.44.69.69
IPv4
-
1.44.59.59
IPv4
-
37.31.86.29
IPv4
-
4.72.83.83
IPv4
-
1.44.64.64
IPv4
-
11.44.73.73
IPv4
-
2.16.34.34
IPv4
-
28.39.35.35
IPv4
-
28.39.33.33
IPv4
-
2.16.33.33
IPv4
-
28.39.34.34
IPv4
-
2.17.33.33
IPv4
-
1.13.28.78
IPv4
-
18.43.34.34
IPv4
-
16.45.34.34
IPv4
-
16.45.33.33
IPv4
-
1.88.16.69
IPv4
-
22.12.43.25
IPv4
-
1.13.1.4
IPv4
-
1.5.5.5
IPv4
-
5.5.75.75
IPv4
-
Showing 1 to 58 of 60 rows
Rows per page:
Showing 1 to 5 of 10 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files (scanned top 25 shared text files)

No comparable text files found between these versions.

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.