Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Fastest Loader Ever

CRITICAL RISKRemoved from Chrome Web Store

Fastest Loader Ever

ID: hocikghkfjfjfocbiomkjdnencfecmhg

Could be malicious

Supported Languages

🇧🇷Brazilian Portuguese

🇨🇳Chinese (Simplified)

🇹🇼Chinese (Traditional)

🇺🇸English

🇮🇳Hindi

🇯🇵Japanese

🇰🇷Korean

Extension Info & Metadata

Status

Removed

Version

1.1.0

Size

0.03 MB

Rating

2.9/5

Reviews

131

Users

153,444

Type

Extension

Updated

Dec 11, 2020

Publisher Contextual Analysis

Author: https://www.fastestle.comView Profile
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

153,444

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Using ONLY a browser extension, the new accelerator can increase the speed of downloads by up to 6 times!

Using only a browser extension, increase the speed of your downloads by splitting files and downloading them in parallel; no program download necessary! While sufficient disk space is required, the extension consumes very little memory. There is no file size limit for downloads. Even files larger than 10 GB can be downloaded without problems. By using the powerful resume function, Power Resume, your files can be downloaded reliably. https://www.fastestle.com/

User Growth

No data available

No user growth data available for this extension

Rating Count

No data available

No rating count data available for this extension

Average Rating

No data available

No rating data available for this extension

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical1

High3

Medium5

Low1

Versions scanned

Showing 1 of 1 scanned version with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1.1.0 Code review	10

Extension Version	Code Review Findings
1.1.0	10

Files with findings

2 distinct paths — top paths by unique finding count:

js/bg.js7
js/loader.js3

S.No.	Category	Severity	File	Summary	Found in Version
1	Privilege Escalation	critical	js/bg.js (line 823)	The background page performs arbitrary ranged fetches to the target URL with `credentials: "include"`, causing browser cookies to be attached from extension context. Combined with the earlier header-rewrite logic, thi…	1.1.0
2	Network Interception	high	js/bg.js (line 106)	This listener intercepts every outgoing XHR on all URLs and conditionally rewrites the request headers before the request is sent. The rewritten headers come from previously captured browser traffic, which can be used…	1.1.0
3	Other	high	js/bg.js (line 106)	The extension silently blocks Google Ads requests (URLs containing 'pagead2') on its own loader page, but only when `option.counter < 30`. The counter is incremented each time the extension opens its download loader t…	1.1.0
4	Unauthorized Data Collection	high	js/bg.js (line 151)	The extension captures the full request headers (including Cookie, Authorization, and other sensitive headers) for every top-level page navigation across ALL URLs the browser visits, storing them in the in-memory `tem…	1.1.0
5	Other	medium	js/loader.js (line 696)	The loader page served at fastestle.com explicitly checks for Google AdSense ad elements and prompts users to disable their ad blocker if ads are not rendering. Combined with the counter-based ad suppression in bg.js,…	1.1.0
6	Remote Code Loading	medium	js/bg.js (line 406)	Instead of using a bundled extension page, the workflow opens a remote `www.fastestle.com/loader.html` tab and binds sensitive download state to that tab. This creates a trust dependency on publisher-controlled web co…	1.1.0
7	Unauthorized Data Collection	medium	js/bg.js (line 533)	The function is named `headRequest` but issues a full HTTP GET (not HEAD) with `credentials: "include"`, which transmits the user's browser cookies to the target download server. While the response body is immediately…	1.1.0
8	Unauthorized Data Collection	medium	js/bg.js (line 830)	All parallel range-fetch requests made to arbitrary download URLs use `credentials: "include"`, unconditionally attaching the user's cookies to every segmented download request regardless of whether the download serve…	1.1.0
9	Unauthorized Data Collection	medium	js/loader.js (line 539)	This content script writes the original filename, host, and size of the intercepted download into the DOM of the remote loader page. Because the script only runs on `www.fastestle.com/loader.html`, any first-party scr…	1.1.0
10	Code Injection	low	js/loader.js (line 681)	The `setHTML` helper assigns raw HTML strings directly to `innerHTML` without sanitization and is called with error message content that can include data from the background page (e.g., `response.message`). If any ser…	1.1.0

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


www.fastestle.com	-	https://www.fastestle.com/
clients2.google.com	/service/update2/crx	https://clients2.google.com/service/update2/crx
*	/*	http:///
*	/*	https:///

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No IP addresses found

2.7 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

I tried this extension twice while downloading a 100 gb game and after waiting 15-20 hours, no luck it was finish but when i click on link to file, guess what it dosen't work and I did it again and still didn't work! I am frustrated because in those two days i could have just downloaded it normally. Do not use this thing as its not a garantee that your file will be downloaded. Please don't use it. I am just angry right now!

Fi73w·8 Jun 2021

Faz o que promete, parabéns!

Jackson Vicente·8 May 2021

다운로드 다했다면서 ��일은 도대체 어디갔는��... 금같은 내 시간 돌려줘.

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Fastest Loader Ever

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 1 Version10

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Extension Files

User Growth

Rating Count

Average Rating

User Reviews