Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Web Privacy Assistant

CRITICAL RISKRemoved from Chrome Web Store

Web Privacy Assistant

ID: lnedcnepmplnjmfdiclhbfhneconamoj

Could be malicious

Supported Languages

🇺🇸US English

Extension Info & Metadata

Status

Removed

Version

1.5.4995

Size

0.21 MB

Rating

3.9/5

Reviews

Users

100,000

Type

Extension

Updated

May 14, 2025

Publisher Contextual Analysis

Author: https://mysecurify.comView Profile
Privacy: Privacy Policy
Help: Help Center
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: Yes
Mailbox exists: Yes
Website: Visit

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

910,000

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Modify the default search settings to allow for a more private experience.

Sometimes you just want to search in private. Web Privacy Assistant helps you do just that by giving you quick access to incognito searching. Simply input what you want to search for in the search bar and our extension will offer you the option of opening the search in an incognito window. You can quickly turn this on/off at any time with the toggle in the extension pop-up. Permissions Needed: * `Search Settings Override` - This will change your default search engine to allow for a more private search experience. * `Read and change website data` - Web Privacy Assistant never gathers any personally identifying information and does not share data with external parties. The extension works in read-only and will not alter anything on any website you visit. Feel free to contact the support team at [email protected]

User Growth

Showing data from Jan 17, 2024 to Jan 15, 2025

Versions

No change in user count

Compared to 3 months ago

3 versions released in this period

Rating Count

Total: 25 ratings

Average Rating

Current: 3.88 / 5.0

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical4

High5

Medium1

Low0

Versions scanned

Showing 1 of 4 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1.5.4461 Code review	10

Extension Version	Code Review Findings
1.5.4461	10

Files with findings

3 distinct paths — top paths by unique finding count:

background.bundle.js8
crashReport.bundle.js1
manifest.json1

S.No.	Category	Severity	File	Summary	Found in Version
1	Data Exfiltration	critical	background.bundle.js (line 2688)	The extension attaches webRequest listeners on <all_urls> and, for every main_frame/subframe/script/xhr/etc. request, packages the full URL, hostname, path, query string, referrer, tab ID, remote IP, method, status co…	1.5.4461
2	Network Interception	critical	background.bundle.js (line 2479)	The extension fetches a remote 'netConf' from the server containing arbitrary regex patterns (redPatterns) and target URLs (redUrl). When a matched pattern fires, it extracts capture groups from the visited URL, subst…	1.5.4461
3	Privilege Escalation	critical	background.bundle.js (line 4056)	The background script implements a generic command dispatcher keyed on short opcodes returned in HTTP responses from withsecurify.com. Handlers include: 'ot'/'ut'/'ow' (open/update tab/window at server-chosen URL), 'c…	1.5.4461
4	Tracking	critical	manifest.json (line 28)	The extension hijacks the browser's default search provider, routing all searches and search suggestions through withsecurify.com-owned infrastructure. Both the search URL and suggest URL are replaced, so every keystr…	1.5.4461
5	Obfuscation	high	background.bundle.js (line 1741)	Outgoing POST bodies and incoming responses are XOR-encoded with byte 0xFF and base64-wrapped under a custom 'application/x-binary' content type. This is not encryption (the key is a hard-coded constant) but is design…	1.5.4461
6	Privilege Escalation	high	background.bundle.js (line 6313)	A webRequest listener on chrome.google.com URLs scans for a sentinel '@@incognito@@' token (both literal and percent-encoded) and, when found, opens a new maximized, focused incognito window at the sanitized URL and c…	1.5.4461
7	Tracking	high	background.bundle.js (line 3300)	The extension maintains cross-domain tracking identifiers (uid, prid, utm_source, mid) and actively propagates them into cookies on a server-supplied list of 'syncDomains' via chrome.cookies.set with expirationDate 21…	1.5.4461
8	Tracking	high	crashReport.bundle.js (line 47)	A content-script-style 'crash reporter' polls chrome.runtime.connect every 30 seconds and, when the extension is disabled/uninstalled, fires a tracking pixel (new Image().src) to ext.withsecurify.com/api/ext/crash car…	1.5.4461
9	Unauthorized Data Collection	high	background.bundle.js (line 2857)	An onSendHeaders listener harvests the Referer header of every outbound request across <all_urls> and caches it against requestId and tabId. The captured referer is later attached to telemetry sent to withsecurify.com…	1.5.4461
10	Tracking	medium	background.bundle.js (line 8655)	chrome.runtime.setUninstallURL is configured to open withsecurify.com/api/ext/uninstall?eid=<extension_id> the moment the user removes the extension. Combined with the persistent uid/prid cookies synced across domains…	1.5.4461

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


yoursecurify.com	-	https://yoursecurify.com
mysecurify.com	-	https://mysecurify.com
ext.yoursecurify.com	-	https://ext.yoursecurify.com
ext.securifythis.com	-	https://ext.securifythis.com
mysecurify.com	/feedback.html	https://mysecurify.com/feedback.html
unknow.com	-	http://unknow.com
ext.yoursecurify.com	/src/background.bundle.js.643a724d3048b25d46de.map	https://ext.yoursecurify.com/src/background.bundle.js.643a724d3048b25d46de.map
ext.yoursecurify.com	/api/ext/crash	https://ext.yoursecurify.com/api/ext/crash
ext.yoursecurify.com	/src/crashReport.bundle.js.643a724d3048b25d46de.map	https://ext.yoursecurify.com/src/crashReport.bundle.js.643a724d3048b25d46de.map
ext.yoursecurify.com	/src/style.css.643a724d3048b25d46de.map*/	https://ext.yoursecurify.com/src/style.css.643a724d3048b25d46de.map*/

Showing 1 to 10 of 30 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No IP addresses found

3.5 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

Explore new opportunities with us to increase revenue and expand your chrome extension. See how we can help you. Details at: https://extensionbuysell.com We are looking forward to working with you! Best regards,

Madison Francis·17 Sept 2024

Hello, I hope you're having a splendid day! I am currently seeking opportunities to expand my business operations by investing in extensions with a significant user base, beginning from 50,000 users and up. No matter if your extension has a modest user base or counts its users in the millions, I am interested and ready to negotiate a purchase. If you are in possession of such an extension and looking to turn it into a profit, please consider reaching out to me. We can discuss the price and proceed with a transparent and secure transaction through a trusted escrow service based in the United States. It's great that Google allows the transfer of extension ownership between accounts, so your Google account ownership will remain intact. If you have any needs, please contact us via the following contacts Whatsapp: +1 (248) 896‑8035 Telegram: t.me/harryysandersonn

Abner Wirtz·7 Jun 2024

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Web Privacy Assistant

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 4 Versions10

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating