Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Video Downloader

CRITICAL RISKRemoved from Chrome Web Store

Video Downloader

ID: igdkmfjceajhpmpalgpcnbopnddibllk

Could be malicious

Supported Languages

🇪🇹Amharic

🇸🇦Arabic

🇧🇩Bengali

🇧🇷Brazilian Portuguese

🇬🇧British English

🇧🇬Bulgarian

🇪🇸Catalan

🇨🇳Chinese (Simplified)

🇹🇼Chinese (Traditional)

🇭🇷Croatian

🇨🇿Czech

🇩🇰Danish

🇳🇱Dutch

🇺🇸English

🇪🇪Estonian

🇵🇭Filipino

🇫🇮Finnish

🇫🇷French

🇩🇪German

🇬🇷Greek

🇮🇳Gujarati

🇮🇱Hebrew

🇮🇳Hindi

🇭🇺Hungarian

🇮🇩Indonesian

🇮🇹Italian

🇯🇵Japanese

🇮🇳Kannada

🇰🇷Korean

🇲🇽Latin American Spanish

🇱🇻Latvian

🇱🇹Lithuanian

🇮🇳Malayalam

🇮🇳Marathi

🇮🇷Persian

🇵🇱Polish

🇵🇹Portuguese

🇷🇴Romanian

🇷🇺Russian

🇷🇸Serbian

🇸🇰Slovak

🇸🇮Slovenian

🇪🇸Spanish

🇰🇪Swahili

🇸🇪Swedish

🇮🇳Tamil

🇮🇳Telugu

🇹🇭Thai

🇹🇷Turkish

🇺🇦Ukrainian

🇺🇸US English

🇻🇳Vietnamese

Extension Info & Metadata

Status

Removed

Version

1.0.5

Size

0.40 MB

Rating

4.2/5

Reviews

Users

9,000

Type

Extension

Updated

Jan 6, 2024

Publisher Contextual Analysis

Trusted

Author: abel.sonmerfieldView Profile
Privacy: Privacy Policy
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes
Website: Visit

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

56,000

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Video Downloader - Fastest tool for downloading pictures and videos in HD quality.

You can download pictures and videos from any page. The best video downloader. The video download tool hope to help you. Please give a 5 star review if it helped you, we will be very grateful! How To Use: 1.) Visit site 2.) Find the picture or video you want to download. 3.) Click the download button to download pictures or videos with one click Feature: -Professional Download the pictures and videos you are interested in with one click. -Online You can download pictures and videos directly from the website. -No limit Note: We only support image and video downloads for Home and Watch-Home pages, and do not support download ads.

User Growth

Showing data from Aug 28, 2022 to Aug 27, 2023

Versions

+12.5%(+1,000 users)

Compared to 3 months ago

5 versions released in this period

Rating Count

Total: 5 ratings

Average Rating

Current: 4.00 / 5.0+4.00

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical1

High3

Medium1

Low0

Versions scanned

Showing 1 of 6 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1.0.3 Code review	5

Extension Version	Code Review Findings
1.0.3	5

Files with findings

3 distinct paths — top paths by unique finding count:

js/content-script.js3
js/background.js1
rule.json1

S.No.	Category	Severity	File	Summary	Found in Version
1	Network Interception	critical	rule.json (line 1)	The declarativeNetRequest ruleset strips `X-Frame-Options` and `Content-Security-Policy` response headers from m.facebook.com and mobile.twitter.com (and tries to also remove COOP/COEP on Twitter). Removing CSP disabl…	1.0.3
2	Credential Theft	high	js/content-script.js (line 7436)	On every Facebook page load the content script scrapes the inline `<script>` containing `async_get_token` to harvest the logged-in user's `USER_ID` and the Facebook CSRF/anti-tamper token (`fb_dtsg`/`async_get_token`)…	1.0.3
3	Network Interception	high	js/background.js (line 3221)	The background service worker exposes a generic HTTP proxy: any sender of an `XMLHttpRequestPost` runtime message can specify an arbitrary URL, method, and JSON body, and the background fetches it from the privileged …	1.0.3
4	Unauthorized Data Collection	high	js/content-script.js (line 7684)	Facebook video URLs the user is viewing (including private/closed-group video URLs the authenticated user has access to) are POSTed to an undisclosed third-party server, `dmsave.top`, whenever the in-page download flo…	1.0.3
5	Phishing	medium	js/content-script.js (line 7660)	If the extension's runtime ID is not the hardcoded `igdkmfjceajhpmpalgpcnbopnddibllk`, the script overlays a percent-encoded Chinese-language modal that translates roughly to "the [extension] you are using has been ta…	1.0.3

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


fontello.com	-	http://fontello.com
github.com	/uuidjs/uuid	https://github.com/uuidjs/uuid#getrandomvalues-not-supported
github.com	/facebook/regenerator/blob/main/LICENSE	https://github.com/facebook/regenerator/blob/main/LICENSE
www.w3.org	/1999/xlink	http://www.w3.org/1999/xlink
www.w3.org	/2000/svg	http://www.w3.org/2000/svg
www.w3.org	/1998/Math/MathML	http://www.w3.org/1998/Math/MathML
element.eleme.io	-	http://element.eleme.io/#/zh-CN/component/upload#yong-hu-tou-xiang-shang-chuan
jquery.com	-	https://jquery.com/
sizzlejs.com	-	https://sizzlejs.com/
jquery.org	/license	https://jquery.org/license

Showing 1 to 10 of 20 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No IP addresses found

3.7 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

Абсолютно бесполезное

Luniul·13 Nov 2024

На открытой странице с видео пишет, что видео не найдено. Какой-то калец.

Amir Aksak·23 Sept 2024

Good plugin, but I also found a very good plugin this week Linkedin Follower Grower - https://chromewebstore.google.com/detail/linkedin-follower-grower/lnnpmjffjejpmdjfeaheifpnnidnfkkd

Jade Ferron

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Video Downloader

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 6 Versions5

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating