Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Web Sender Plus

CRITICAL RISKRemoved from Chrome Web Store

Web Sender Plus

ID: fngmlbjdnbieamehlidbkaikefhkkian

Could be malicious

Supported Languages

🇸🇦Arabic

🇬🇧British English

🇧🇬Bulgarian

🇨🇳Chinese (Simplified)

🇭🇷Croatian

🇨🇿Czech

🇩🇰Danish

🇺🇸English

🇪🇪Estonian

🇫🇷French

🇩🇪German

🇮🇳Hindi

🇱🇻Latvian

🇱🇹Lithuanian

🇵🇹Portuguese

🇷🇺Russian

🇸🇰Slovak

🇸🇮Slovenian

🇪🇸Spanish

🇺🇸US English

Extension Info & Metadata

Status

Removed

Version

1.0.35

Size

6.92 MB

Rating

4.7/5

Reviews

Users

30,781

Type

Extension

Updated

Sep 26, 2023

Publisher Contextual Analysis

Trusted

Author: shuttershanti708View Profile
Privacy: Privacy Policy
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

79,903

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Add enhancements to your WhatsApp Web and increase productivity using Web Sender.

Web Sender is the best google chrome extension to enhance your experience on WhatsApp Web. It is the currently the highest rated and the best web sender on the chrome webstore. Download now! ———————————————————— LEGAL ———————————————————— WhatsApp is a trademark of WhatsApp Inc., registered in the U.S. and other countries. This extension has no relationship to WhatsApp or WhatsApp Inc.

User Growth

Showing data from Aug 09, 2022 to Aug 08, 2023

Versions

+85.27%(+14,167 users)

Compared to 3 months ago

26 versions released in this period

Rating Count

Total: 31 ratings-29 (-48%)

Average Rating

Current: 4.65 / 5.0+4.65

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical0

High5

Medium3

Low1

Versions scanned

Showing 1 of 30 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1.0.32 Code review	9

Extension Version	Code Review Findings
1.0.32	9

Files with findings

2 distinct paths — top paths by unique finding count:

js/background.js7
js/popup.js2

S.No.	Category	Severity	File	Summary	Found in Version
1	Data Exfiltration	high	js/background.js (line 905)	Implements LZ4-compressed POSTs of batched user telemetry to the Aliyun SLS /logstores/{name}/track endpoint. Compression and the proprietary x-log-* headers obscure the payload from naive network inspection, and batc…	1.0.32
2	Data Exfiltration	high	js/background.js (line 11550)	Sets the uninstall URL to a wawebsender.com endpoint with the user's WhatsApp phone number (utm_source=<phone>), country, install_time, persistent UUID, and version embedded as query parameters. Uninstall events there…	1.0.32
3	Unauthorized Data Collection	high	js/background.js (line 1933)	Background service worker exfiltrates the user's WhatsApp phone number, derived country code, install timestamp, persistent UUID, browser/userAgent fingerprint, platform, language, and event metadata to an Aliyun Simp…	1.0.32
4	Unauthorized Data Collection	high	js/background.js (line 836)	Extracts the raw user phone number from every participant of a WhatsApp group object. The same harvesting routine is mirrored in popup.js (line 6228) and the harvested list is later persisted as groupMembersPhoneList …	1.0.32
5	Unauthorized Data Collection	high	js/popup.js (line 2812)	Persists every selected WhatsApp group's full participant phone list under groupMembersPhoneList in chrome.storage.local, enabling later bulk outreach to non-consenting members. Combined with the group participant har…	1.0.32
6	Code Injection	medium	js/popup.js (line 4646)	Dynamically injects a script literally named 'obfuscate.js' into the page DOM (web-accessible resource). The bundled obfuscate.js is a webpack runtime that builds a 7-day date list, but the misleading filename plus DO…	1.0.32
7	Remote Code Loading	medium	js/background.js (line 11532)	On every content-script init the background fetches an attacker-controlled JSON config from waplus.io/user/api-chrome-extension/get-remote-config and stores the response in chrome.storage.local under zbaseConfig. Remo…	1.0.32
8	Remote Code Loading	medium	js/background.js (line 11490)	Generic POST helper used to retrieve and store remote_config (above) keyed by extension_id. The response JSON is trusted and persisted to chrome.storage.local with no schema validation, so any field the server returns…	1.0.32
9	Tracking	low	js/background.js (line 11575)	On install, immediately force-opens both web.whatsapp.com and a wawebsender.com tracking URL with a utm_source=sender_install parameter, and ships an install event (eventType 300008) with the persistent UUID to the Al…	1.0.32

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

836

IPv4

266

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


www.google-analytics.com	/g/collect	https://www.google-analytics.com/g/collect
wajs-server.calixto.shop	-	https://wajs-server.calixto.shop
wajsapi.titanchat.com.br	-	https://wajsapi.titanchat.com.br
wppc-linkpreview.cloudtrix.com.br	-	https://wppc-linkpreview.cloudtrix.com.br
clients2.google.com	/service/update2/crx	https://clients2.google.com/service/update2/crx
wawebsender.com	-	https://wawebsender.com/
www.w3.org	/1999/02/22-rdf-syntax-ns	http://www.w3.org/1999/02/22-rdf-syntax-ns#
ns.adobe.com	/tiff/1.0/	http://ns.adobe.com/tiff/1.0/
ns.adobe.com	/exif/1.0/	http://ns.adobe.com/exif/1.0/
static-global.zingfront.com	/common/flags/4x3/ad.svg	https://static-global.zingfront.com/common/flags/4x3/ad.svg

Showing 1 to 10 of 840 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


19.1.2.1	IPv4	-
21.1.3.27	IPv4	-
21.1.5.2	IPv4	-
22.4.2.4	IPv4	-
2.3.3.1	IPv4	-
2.3.3.2	IPv4	-
2.5.97.2	IPv4	-
9.3.2.2	IPv4	-
15.2.12.3	IPv4	-
15.2.12.2	IPv4	-
22.4.2.32	IPv4	-
2.3.7.6	IPv4	-
2.3.7.8	IPv4	-
2.3.7.2	IPv4	-
2.3.7.9	IPv4	-
2.3.7.1	IPv4	-
18.3.1.15	IPv4	-
2.1.7.45	IPv4	-
2.1.6.1	IPv4	-
2.1.6.2	IPv4	-
2.3.4.5	IPv4	-
2.3.4.6	IPv4	-
2.3.4.10	IPv4	-
2.3.5.1	IPv4	-
2.3.6.1	IPv4	-
2.3.7.3	IPv4	-
18.3.1.13	IPv4	-
2.1.7.50	IPv4	-
20.1.6.2	IPv4	-
20.1.2.3	IPv4	-
20.1.4.1	IPv4	-
20.1.6.10	IPv4	-
20.1.6.9	IPv4	-
2.6.4.1	IPv4	-
2.1.7.25	IPv4	-
20.5.2.35	IPv4	-
20.5.2.1	IPv4	-
20.5.2.16	IPv4	-
20.1.2.2	IPv4	-
5.2.1.2	IPv4	-
19.4.2.3	IPv4	-
2.1.7.8	IPv4	-
2.5.198.105	IPv4	-
2.5.97.89	IPv4	-
2.5.97.90	IPv4	-
2.5.198.109	IPv4	-
2.5.97.91	IPv4	-
2.5.198.107	IPv4	-
2.5.198.111	IPv4	-
2.5.97.92	IPv4	-
2.5.198.27	IPv4	-
2.5.97.18	IPv4	-
2.5.198.28	IPv4	-
2.5.97.19	IPv4	-
2.5.198.29	IPv4	-
2.5.97.20	IPv4	-
2.5.198.30	IPv4	-
2.5.97.21	IPv4	-
2.5.198.31	IPv4	-
2.5.97.22	IPv4	-
2.5.198.32	IPv4	-
2.5.97.23	IPv4	-
2.5.198.33	IPv4	-
2.5.97.24	IPv4	-
2.5.198.34	IPv4	-
2.5.97.25	IPv4	-
2.5.198.35	IPv4	-
2.5.97.26	IPv4	-
2.5.198.36	IPv4	-
2.5.97.27	IPv4	-
2.5.97.28	IPv4	-
2.5.198.37	IPv4	-
2.5.97.29	IPv4	-
2.5.198.40	IPv4	-
2.5.97.32	IPv4	-
2.5.198.38	IPv4	-
2.5.97.30	IPv4	-
2.5.198.39	IPv4	-
2.5.97.31	IPv4	-
2.5.198.84	IPv4	-
2.5.97.68	IPv4	-
2.5.198.88	IPv4	-
2.5.97.72	IPv4	-
2.5.198.85	IPv4	-
2.5.97.69	IPv4	-
2.5.198.62	IPv4	-
2.5.97.45	IPv4	-
2.5.198.63	IPv4	-
2.5.97.46	IPv4	-
2.5.198.41	IPv4	-
2.5.97.33	IPv4	-
2.5.198.58	IPv4	-
2.5.97.40	IPv4	-
2.5.198.57	IPv4	-
2.5.97.39	IPv4	-
2.5.198.66	IPv4	-
2.5.97.49	IPv4	-
2.5.198.42	IPv4	-
2.5.97.34	IPv4	-
2.5.198.79	IPv4	-
2.5.97.63	IPv4	-
2.5.198.89	IPv4	-
2.5.97.74	IPv4	-
2.5.192.112	IPv4	-
2.5.192.11	IPv4	-
2.5.97.93	IPv4	-
2.5.97.9	IPv4	-
2.5.198.61	IPv4	-
2.5.97.44	IPv4	-
2.5.198.59	IPv4	-
2.5.97.41	IPv4	-
2.5.198.76	IPv4	-
2.5.97.60	IPv4	-
2.5.198.77	IPv4	-
2.5.97.61	IPv4	-
2.5.198.70	IPv4	-
2.5.97.54	IPv4	-
2.5.198.72	IPv4	-
2.5.97.56	IPv4	-
2.5.198.86	IPv4	-
2.5.198.87	IPv4	-
2.5.97.71	IPv4	-
2.5.198.71	IPv4	-
2.5.97.55	IPv4	-
2.5.198.73	IPv4	-
2.5.97.57	IPv4	-
2.5.198.92	IPv4	-
2.5.198.46	IPv4	-
2.5.198.47	IPv4	-
2.5.198.48	IPv4	-
2.5.198.49	IPv4	-
2.5.198.50	IPv4	-
2.5.198.51	IPv4	-
2.5.198.52	IPv4	-
2.5.198.53	IPv4	-
2.5.198.54	IPv4	-
2.5.198.55	IPv4	-
2.5.97.52	IPv4	-
2.5.198.91	IPv4	-
2.5.97.76	IPv4	-
2.5.198.25	IPv4	-
2.5.97.16	IPv4	-
2.5.198.103	IPv4	-
2.5.97.87	IPv4	-
2.5.198.104	IPv4	-
2.5.97.88	IPv4	-
2.5.198.93	IPv4	-
2.5.198.95	IPv4	-
2.5.198.81	IPv4	-
2.5.198.26	IPv4	-
2.5.198.43	IPv4	-
2.5.198.45	IPv4	-
2.5.198.56	IPv4	-
2.5.198.64	IPv4	-
2.5.198.65	IPv4	-
2.5.198.68	IPv4	-
2.5.198.69	IPv4	-
2.5.198.75	IPv4	-
2.5.198.78	IPv4	-
2.5.198.82	IPv4	-
2.5.198.90	IPv4	-
2.5.198.67	IPv4	-
2.5.198.94	IPv4	-
2.5.198.83	IPv4	-
2.5.198.80	IPv4	-
2.5.198.74	IPv4	-
2.5.198.1	IPv4	-
2.5.198.3	IPv4	-
2.5.198.21	IPv4	-
2.5.198.118	IPv4	-
2.5.97.1	IPv4	-
2.5.97.4	IPv4	-
2.5.97.8	IPv4	-
2.5.97.12	IPv4	-
2.5.97.98	IPv4	-
2.5.198.4	IPv4	-
2.5.198.17	IPv4	-
2.5.97.10	IPv4	-
18.3.1.99	IPv4	-
18.3.1.82	IPv4	-
18.3.1.35	IPv4	-
18.3.1.88	IPv4	-
18.3.1.17	IPv4	-
18.3.1.80	IPv4	-
18.3.1.2	IPv4	-
18.3.1.55	IPv4	-
18.3.1.48	IPv4	-
18.3.1.62	IPv4	-
18.3.1.85	IPv4	-
18.3.1.87	IPv4	-
18.3.1.73	IPv4	-
18.3.1.4	IPv4	-
2.1.7.61	IPv4	-
21.2.2.150	IPv4	-
21.2.2.71	IPv4	-
21.2.2.27	IPv4	-
21.2.2.120	IPv4	-
18.3.1.12	IPv4	-
18.3.1.83	IPv4	-
18.3.1.36	IPv4	-
2.1.7.7	IPv4	-
2.1.7.20	IPv4	-
3.1.3.2	IPv4	-
4.3.2.7	IPv4	-
10.4.6.2	IPv4	-
7.3.6.2	IPv4	-
7.3.6.3	IPv4	-
7.3.6.4	IPv4	-
7.3.6.5	IPv4	-
7.3.6.6	IPv4	-
7.3.6.7	IPv4	-
7.3.6.8	IPv4	-
7.3.6.9	IPv4	-
7.3.6.10	IPv4	-
7.3.6.11	IPv4	-
7.3.6.12	IPv4	-
7.3.6.13	IPv4	-
7.3.6.14	IPv4	-
7.3.6.15	IPv4	-
7.3.6.16	IPv4	-
7.3.7.1	IPv4	-
7.3.7.2	IPv4	-
2.3.4.1	IPv4	-
2.3.4.2	IPv4	-
2.3.4.3	IPv4	-
2.3.4.4	IPv4	-
4.4.17.1	IPv4	-
25.1.2.1	IPv4	-
19.1.2.7	IPv4	-
15.2.3.4	IPv4	-
22.1.3.4	IPv4	-
22.1.3.13	IPv4	-
22.1.3.29	IPv4	-
22.1.3.30	IPv4	-
22.1.5.2	IPv4	-
9.4.4.6	IPv4	-
9.4.4.7	IPv4	-
19.4.1.1	IPv4	-
19.4.2.2	IPv4	-
19.4.2.4	IPv4	-
19.4.2.6	IPv4	-
19.4.2.8	IPv4	-
19.4.2.9	IPv4	-
19.4.2.10	IPv4	-
19.4.2.11	IPv4	-
19.4.2.12	IPv4	-
19.4.2.13	IPv4	-
19.4.2.14	IPv4	-
19.4.2.1	IPv4	-
19.4.2.5	IPv4	-
19.1.2.2	IPv4	-
19.1.2.4	IPv4	-
19.1.2.3	IPv4	-
19.1.2.6	IPv4	-
19.1.2.8	IPv4	-
19.4.3.4	IPv4	-
19.4.3.5	IPv4	-
20.2.1.9	IPv4	-
15.2.3.5	IPv4	-
19.1.2.14	IPv4	-
15.2.3.14	IPv4	-
13.3.3.7	IPv4	-
19.1.2.9	IPv4	-
15.2.3.2	IPv4	-
19.1.3.1	IPv4	-
4.2.1.2	IPv4	-

Showing 1 to 266 of 270 rows

Rows per page:

4.3 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

Só estou conseguindo enviar imagens escrevendo algum texto, ele não está enviando mídia sem ter texto é o único problema

Cleber Rafael de Magio·28 Sept 2023

Por favor, alguém poderia explicar porque não conseguimos enviar imagens!

Marcelo Pereira·26 Sept 2023

FOI BOM ENQUANTO DUROU... ACREDITO QUE NÃO ENVIA MAIS FOTOS PARA FORÇAR VC A ADQUIRIR A VESÃO PAGA. NO MAIS SE ALGUEM COSEGUI MANDAR FOTOS NOVAMENTE AVISA AQUI POR FAVOR.

L-

LUCAS - PNZ

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Web Sender Plus

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 30 Versions9

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating