Is Asify safe?

Question

Is Asify safe?

Accepted Answer

Asify is high risk. Our dynamic analysis confirmed that this extension injects a script into every website you visit that intercepts all XMLHttpRequest (XHR) network calls made by those pages. The script captures the request URL, method, request headers, and full response body for every XHR call, then forwards this data internally via a CustomEvent. The interception is active on all sites — not just the extension's advertised shopping platforms — because the injector script runs on every page load. Our dynamic analysis confirmed that when you visit any of 23 Vinted country websites (vinted.fr, vinted.de, vinted.co.uk, and others), this extension immediately sends the domain name to a third-party server at api.reasell.app. This happens on every visit to each Vinted country site without any disclosure in the extension's Chrome Web Store listing. The data sent is the hostname of the Vinted site you visited.

Is ASIFY safe?

Findings