Is CFCA CertEnrollment.JLBank Extension safe?
CFCA CertEnrollment.JLBank Extension connects to a caller-chosen native messaging host and relays the caller's payload with no allowlist.
When a page on jlbank.com.cn (or a handful of hardcoded local/internal addresses) messages this extension, it opens a native messaging connection using whatever host name the page supplies and relays whatever payload the page sends verbatim to that native application, returning its raw response to the page. Both the extension's manifest and this messaging bridge accept plain HTTP as well as HTTPS from those same origins, so the same access works over an unencrypted connection.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
What it can do
Permissions this extension asks for, as declared in version 3.2.0.2. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Read and change your data on jlbank.com.cn
https://*.jlbank.com.cn/* and 1 more
Read and change your data on 10.60.50.102
https://10.60.50.102/* and 1 more
Read and change your data on 10.60.50.232
https://10.60.50.232/* and 1 more
Read and change your data on 10.60.50.147
https://10.60.50.147/* and 1 more
Read and change your data on 10.172.254.103
https://10.172.254.103/* and 1 more
Read and change your data on 127.0.0.1
https://127.0.0.1/* and 1 more
Read and change your data on 25.13.17.212
https://25.13.17.212/* and 1 more
Read and change your data on 25.12.9.47
https://25.12.9.47/* and 1 more
Read and change your data on localhost
https://localhost/* and 1 more
Talk to a program installed on your computer, outside the browser's sandbox
nativeMessaging