Is CFCA CryptoKit.YLJR Extension safe?

Low risk

CFCA CryptoKit relays messages from yljr.com pages to a native messaging host named by the page.

The extension lets web pages on yljr.com subdomains pick a native messaging host and forward messages to it, returning the host's reply to the page. It has no content scripts and does not read page data itself. Access is limited to the yljr.com domain, and the named host must also permit this extension.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

17Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 3.4.0.1. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on yljr.com

    http://*.yljr.com/* and 1 more

  • Talk to a program installed on your computer, outside the browser's sandbox

    nativeMessaging

Updated 22 October 2026bkclfniddohkepcfbdofaaifgohfgohi