Is Clifl safe?

Medium risk

Clifl reads YouTube page data and account identifiers during server-directed viewing tasks.

Clifl opens YouTube task pages from its servers, injects a task script, and sends back page URLs, DOM values, watch state, and video-frame captures requested by the task data. When prompted to check the account, the script reads the signed-in YouTube email, name, handle, or avatar label and includes that value in later requests. It can also set a temporary server-supplied Referer header for YouTube navigations in the task tab.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

Ytmonsterv4.1.0Chrome Web Store
40Risk
Who publishes it

Ytmonster - 1 other listing from the same operator, none carrying a finding

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
Ytmonster

Same store account

1 other listing published from this account, 3k+ users between them, none of them carrying a finding.

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Where it sends data

Destinations our analysis observed Clifl contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • app2.ytmonster.ru

    Clifl sends data to app2.ytmonster.ru. No other extension we have analysed sends data here.

  • clifl.com

    Clifl sends data to clifl.com. No other extension we have analysed sends data here.

  • ytmonster.ru

    Clifl sends data to ytmonster.ru. No other extension we have analysed sends data here.

Updated 30 September 2026ffjbejplhhgfbhckieoklhaoibhckbed