Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Video Downloader for Web

CRITICAL RISKRemoved from Chrome Web Store

Video Downloader for Web

ID: pgffceondpnmmmlbpmchkldadpclbcph

Could be malicious

Extension Info & Metadata

Status

Removed

Version

1.2.7

Size

0.81 MB

Rating

4.2/5

Reviews

623

Users

87,759

Type

Extension

Updated

Sep 10, 2020

Publisher Contextual Analysis

Author: vdweb.netView Profile
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

87,759

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Popular and one of the best Video Downloader in Web Store. Saves popular media formats.

Video Downloader for Web allows you to download MP4, MOV, FLV, WEBM - files. No Youtube Downloader. The extension logo in the upper right corner of the browser will go colour turquoise if extension detects any videos files that you can download with this app. In the pop-up window is display every available video file and format that video downloader detected. Upload it to your PC if you want! • Video Downloader for web - Features ✓ Easy, fast, safe and light! ✓ Video Downloader - detects multiple formats to downloads. ✓ Video Downloader - OV, AVI, ASF, MPG and many more. ✓ Video Downloader - downloads almost from 99% of video hosting websites. No Youtube Downloader. ✓ Video Downloader - downloads multiple videos simultaneously. ✓ Video Downloader - allows you to skip parts and you don't have to watch ads or boring content again. After installing app, please reload tab where you want to download the video for Video Downloader for Web extension to take effect! • Permissions: In order for Video Downloader for Web to work, it needs permission to accessibility the websites you’re on, so it works on all pages that you visit. To be able to connect to and detected VideoContext of any website and to show list of all detected video. Google displays this message on installation "Read and change all your data on the websites that you visit". • Policy Disclaimer: Feel free to contact us, if there is any problem or suggestion. Compatible with Adblock, AdBlock Plus, uBlock Origin, Video Downloader for Chrome, Tube Video Downloader professional and Adblocker for Youtube extension. No Youtube Downloader. Due to restrictions of the Chrome Webstore downloading Youtube videos is not allowed! No Youtube Downloader. You can uninstall the Video Downloader for web extension whenever you want on your chrome panel. Video Downloader is not responsible for the media downloaded by users. We suggest checking the copyright of the media and files to download. Video Downloader suggests not download adult videos. Share your experience at the chrome store and rate the Video Downloader for web extension. We will be glad to hear your reviews! Please feel to contact us, if there is any problem or suggestion :)

User Growth

No data available

No user growth data available for this extension

Rating Count

No data available

No rating count data available for this extension

Average Rating

No data available

No rating data available for this extension

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical2

High2

Medium2

Low0

Versions scanned

Showing 1 of 1 scanned version with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1.2.7 Code review	6

Extension Version	Code Review Findings
1.2.7	6

Files with findings

2 distinct paths — top paths by unique finding count:

js/background.js5
js/contentscript.js1

S.No.	Category	Severity	File	Summary	Found in Version
1	Network Interception	critical	js/background.js (line 188)	Remote-controlled affiliate redirect engine (bgProcessor) intercepts ALL main_frame HTTP/HTTPS requests. Controlled entirely by remote config from vdweb.net/api/config/, it can redirect user navigation through affilia…	1.2.7
2	Network Interception	critical	js/background.js (line 306)	Security header stripping via remote config. The filterRequests() method, activated when the remote config contains validateFields, registers a blocking webRequest listener on <all_urls> that strips any response heade…	1.2.7
3	Tracking	high	js/contentscript.js (line 22)	Remotely-controlled Mixpanel analytics injection into web pages. When the remote config enables extendedAnalytics, the extension loads the Mixpanel analytics library into every matched page and initializes it with a r…	1.2.7
4	Unauthorized Data Collection	high	js/background.js (line 38)	Exfiltrates extension install/update/uninstall events to vdweb.net over plain HTTP (not HTTPS). The processQueue() method sends base64-encoded JSON containing extension ID, version, user's unique tracking ID, install …	1.2.7
5	Privilege Escalation	medium	js/background.js (line 70)	Selectively removes X-Frame-Options headers from Facebook responses. This breaks Facebook's clickjacking protection specifically to allow the extension's content script to operate within iframes on Facebook. Combined …	1.2.7
6	Unauthorized Data Collection	medium	js/background.js (line 56)	Sets the uninstall notification URL to an HTTP (not HTTPS) endpoint. When the user uninstalls, Chrome will POST notification data (extension ID, version, UID) to http://vdweb.net/uninstall/ over plaintext. This expose…	1.2.7

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


www.w3.org	/2000/svg	http://www.w3.org/2000/svg
fian.my.id	/Waves	http://fian.my.id/Waves
github.com	/fians/Waves/blob/master/LICENSE	https://github.com/fians/Waves/blob/master/LICENSE
polymer.github.io	/LICENSE.txt	http://polymer.github.io/LICENSE.txt
polymer.github.io	/AUTHORS.txt	http://polymer.github.io/AUTHORS.txt
polymer.github.io	/CONTRIBUTORS.txt	http://polymer.github.io/CONTRIBUTORS.txt
polymer.github.io	/PATENTS.txt	http://polymer.github.io/PATENTS.txt
github.com	/Polymer/platform/issues/53.	https://github.com/Polymer/platform/issues/53.
www.w3.org	/1999/02/22-rdf-syntax-ns	http://www.w3.org/1999/02/22-rdf-syntax-ns#
ns.adobe.com	/photoshop/1.0/	http://ns.adobe.com/photoshop/1.0/

Showing 1 to 10 of 40 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No IP addresses found

4.0 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

birşey indirebilen oldumu???

yakup ilbak·20 Oct 2020

yes yes ismet inönü lozan barış antlaşması

uloha·19 Oct 2020

Cũng hay đấy chứ :)

Thảo Nhi·19 Oct 2020

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Video Downloader for Web

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 1 Version6

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Extension Files

User Growth

Rating Count

Average Rating

User Reviews