Chrome Web StoreCaution required
Suspicious in code review
Our reviewer found behaviour consistent with malware, but not enough to confirm it. Treat this extension as untrusted until it has been re-reviewed.
1 medium-severity finding in this extension’s code
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
What our analysis found
NoKYC - Anonymous Crypto Exchange is rated caution by Extension Auditor. Our code review reported 1 finding (1 medium), led by tracking. It comes from a publisher with 2 extensions and was last updated in September 2023.
Key findings
- Medium
Tracking
When any URL delivered to the popup contains an 'affiliate' query parameter, every completed transaction silently POSTs the exchange amount, target currency, transaction ID, and a referrer identifier to [domain withheld]. The CWS listing declares zero data collection, and the publisher's stated privacy policy URL ([domain withheld]) is entirely unrelated to crypto or [domain withheld], so this transmission cannot be cleared as disclosed first-party telemetry. The data profile (amount + currency + txid) constitutes financial transaction metadata sent without user notice.
Analyst notes
The extension's JavaScript is a functional crypto exchange front-end wiring the [domain withheld] API to a [domain withheld]-branded UI — no credential theft, no DOM injection into external pages, no loaders. However, two contextual red flags are severe: (1) the publisher's only other extension on record is flagged malicious (100% rate), and (2) the declared privacy policy URL points to [domain withheld] — a completely unrelated site — rather than any crypto or [domain withheld] policy, suggesting the publisher recycled a throwaway policy. The affiliate-tracking POST to [domain withheld] sends real exchange transaction data (amount, currency, transaction ID, and a referrer URL from the query string) without CWS data-collection disclosure; while [domain withheld] appears to be the publisher's own back-end domain, the mismatch with the declared privacy policy means this cannot be cleared as first-party by-disclosure.
NoKYC - Anonymous Crypto Exchange Chrome extension security report
ID: jpmopkcjnbnckkmjolcadglhcamimfkj
Supported Languages
Extension Info & Metadata
Publisher Contextual Analysis
- Author
- DYENSILLC
- Privacy
- Privacy Policy
- Country
- IT
- MX records exist
- Yes
- Domain exists
- Yes
- Is disposable
- No
- Is role-based
- No
- Mailbox exists
- Yes
- Address
- Via Consolare Rimini-San Marino, 13 Rimini, RN 47924 IT
- Website
- Visit
Screenshots & videos
Install growth
This extension requests no permissions and has no recorded risk factors.
- 1 medium
The file, code excerpt and explanation behind each finding are part of the full report. No conclusion has been withheld — only the evidence. The verdict above already reflects everything found here.
1 medium-severity finding in this extension’s code
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
About this extension
Exchange Cryptocurrency Anonymously - Safe, Quick, & Easy
Read the publisher’s full description
Exchange Cryptocurrency Anonymously - Safe, Quick & Easy Looking for crypto without ID? Want coins without KYC? NKX is the ultimate exchange for simplicity and privacy. This is the simplest and easiest to use app for trading crypto. No Registration You don't need to sign-up - Trading is accountless. Just turn on and start trading. No email or phone confirmation required. Not even an account or profile. Maximum convenience. No Verification Finally, a cryptocurrency app that doesn't require ID. You never have to show your identity for coin swaps. Complete Anonymity. Trade without verification.
User reviews
Extension files
Browse and explore files within this extension package
Gain full insight into all external connections.
Upgrade for full visibility.
URLs
View the external URLs this extension communicates with to understand its network activity and data interactions.
1 medium-severity finding in this extension’s code
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
Gain full insight into all external connections.
Upgrade for full visibility.
Related extensions
More from DYENSILLC
- EasyGPT for Chrome2 users
Popular in Tools
- Montara Chrome Extension639,000,000 users
- 迅雷下载支持85,000,000 users
- ApexGuard VPN Proxy for Chrome10,000,000 users
- Zotero Connector9,000,000 users
- Browsec VPN - Free VPN for Chrome8,000,000 users
Store rankings
Where this extension appears in store category, collection and keyword rankings.