Is CFCA CryptoKit.Paperless.zybank Extension safe?

Low risk

CFCA CryptoKit accepts a caller-supplied native host name from bank-domain pages and connects to it without validating it against an allowlist.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

v3.4.0.1Chrome Web Store
20Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Updated 15 July 2026lmplfbilpbnjhafalmhlkpggbefibode