Is CFCA CryptoKit.Paperless.zybank Extension safe?

Clean risk

CFCA CryptoKit accepts a caller-supplied native host name from bank-domain pages and connects to it without validating it against an allowlist.

0Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Updated 1 July 2026lmplfbilpbnjhafalmhlkpggbefibode