Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Ghostify - Anon Story Viewer

CRITICAL RISKRemoved from Chrome Web Store

Ghostify - Anon Story Viewer

ID: ajkkboilpcbfgojiochgfbeblbpcgpga

Could be malicious

Supported Languages

🇺🇸US English

Extension Info & Metadata

Status

Removed

Version

2.7

Size

0.39 MB

Rating

3.5/5

Reviews

Users

9,000

Type

Extension

Updated

Jan 11, 2025

Publisher Contextual Analysis

Author: https://getghostify.comView Profile
Privacy: Privacy Policy
Help: Help Center
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes
Website: Visit

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

9,000

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Ghostify helps you view stories without a trace (The story owner won't know you saw their story)

Do you want to see someone's story without them finding out? Ghostify is for you! Who is Ghostify NOT for? You won't be able to see a private account's stories if they haven't accepted you as a follower. Ghostify works for private accounts that you already follow them. How it works: Add this extension to your google chrome, turn it on and start browsing on web application. This way your account won't be listed in story viewers list for those you see their story.

User Growth

Showing data from Mar 15, 2022 to Mar 14, 2023

Versions

No change in user count

Compared to 3 months ago

6 versions released in this period

Rating Count

Total: 6 ratings

Average Rating

Current: 4.33 / 5.0+4.33

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical0

High4

Medium2

Low1

Versions scanned

Showing 1 of 13 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
2.1 Code review	7

Extension Version	Code Review Findings
2.1	7

Files with findings

5 distinct paths — top paths by unique finding count:

background.js2
utils.js2
contentscript.js1
rules.json1
script.js1

S.No.	Category	Severity	File	Summary	Found in Version
1	Data Exfiltration	high	background.js (line 47)	Uses chrome.identity.getProfileUserInfo to retrieve the signed-in Google account email/id, persists it into storage, and then transmits the entire settings blob (including the user's email, _ga cookie value and licens…	2.1
2	Privilege Escalation	high	contentscript.js (line 1)	Injects script.js into the Instagram page's main world via a <script> tag at document_start, escaping the content-script isolation boundary so injected code runs with full page-context privileges. It then forwards the…	2.1
3	Tracking	high	utils.js (line 27)	Sends the user's Google account email as the GA4 user_id (and falls back to it as client_id) to Google Analytics Measurement Protocol. This pairs the user's real email with behavioral events (license submits, instagra…	2.1
4	Unauthorized Data Collection	high	utils.js (line 12)	Posts the entire settings object (which the caller in background.js populates with the Google profile email/id, _ga cookie value, license key, and install_time) to a remote endpoint. Using mode:'no-cors' suppresses re…	2.1
5	Network Interception	medium	script.js (line 1)	Monkey-patches XMLHttpRequest.prototype.send in the Instagram page context to silently drop any request whose body contains the string 'viewSeenAt'. This is deliberate network interception that suppresses Instagram's …	2.1
6	Tracking	medium	background.js (line 93)	Reads the _ga (Google Analytics) tracking cookie from getghostify.com using the cookies permission and stores it for later transmission. The captured client_id is then bundled into checkLicense() payloads and used as …	2.1
7	Network Interception	low	rules.json (line 1)	Bundled declarativeNetRequest ruleset that blocks any XHR on instagram.com whose URL contains the substring 'seen'. While the manifest does not actually register declarative_net_request, the file demonstrates intent t…	2.1

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


shop.getghostify.com	/checkout/buy/ee7d66e8-6f8c-47c6-97ce-a2214994d5c5	https://shop.getghostify.com/checkout/buy/ee7d66e8-6f8c-47c6-97ce-a2214994d5c5?media=0&discount=0&checkout[email
*.instagram.com	/*	https://.instagram.com/
getghostify.com	/installation-complete	https://getghostify.com/installation-complete
getghostify.com	-	https://getghostify.com/
instagram.com	-	https://instagram.com
shop.getghostify.com	/billing	https://shop.getghostify.com/billing
chrome.google.com	/webstore/detail/ghostify-view-instagram-s/ajkkboilpcbfgojiochgfbeblbpcgpga	https://chrome.google.com/webstore/detail/ghostify-view-instagram-s/ajkkboilpcbfgojiochgfbeblbpcgpga
fontawesome.com	-	https://fontawesome.com
fontawesome.com	/license/free	https://fontawesome.com/license/free
chromewebstore.google.com	/u/4/detail/ghostify-instagram-story/ajkkboilpcbfgojiochgfbeblbpcgpga	https://chromewebstore.google.com/u/4/detail/ghostify-instagram-story/ajkkboilpcbfgojiochgfbeblbpcgpga?hl=en

Showing 1 to 10 of 20 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No IP addresses found

4.2 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

Excelente extensão, funciona perfeitamente! ESTA RECOMENDADA em ESTRELAS

Faturando na Internet·14 Oct 2024

Does not work. Do not pay for it

Yanni Pavlou·5 Sept 2024

Se puede instalar la extensión pero no deja activarla. Arréglenlo por favor Gracias

Saroti flamenca·17 Jul 2024

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Ghostify - Anon Story Viewer

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 13 Versions7

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating