Is ESEP Crypto Extension safe?

Clean risk

ESEP Crypto Extension bridges cryptographic signing requests from Russian government portals to locally installed native messaging hosts.

The extension injects a content script into a scoped list of Russian government and enterprise web portals. When a page fires a custom event requesting a cryptographic operation, the content script forwards the JSON payload to a background service worker, which relays it to native messaging hosts (com.topcase.cryptohost or com.topcase.cryptoupdaterhost) installed on the user's machine. The native host response is returned to the page via a corresponding custom event.

esepextv1.1.0Chrome Web Store
0Risk
Who publishes it

esepext - 1 other listing from the same operator, none carrying a finding

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
esepext

Same store account

1 other listing published from this account, 700k+ users between them, none of them carrying a finding.

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 1.1.0. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on localhost

    *://localhost/*

  • Read and change your data on itopcase.ru

    *://*.itopcase.ru/*

  • Read and change your data on upt24.ru

    *://*.upt24.ru/*

  • Read and change your data on mos.ru

    *://*.mos.ru/*

  • Read and change your data on 31.13.60.137

    *://31.13.60.137/ESEP-WebApp/* and 1 more

  • Read and change your data on eaist2.granit.ru

    *://eaist2.granit.ru/*

  • Read and change your data on eaist2rc.granit.ru

    *://eaist2rc.granit.ru/*

  • Read and change your data on 172.16.78.10

    *://172.16.78.10/ESEP-WebApp/*

  • Read and change your data on rosim.ru

    *://*.rosim.ru/*

  • Read and change your data on xn--80aaggvgieoeoa2bo7l.xn--p1ai

    *://xn--80aaggvgieoeoa2bo7l.xn--p1ai/*

  • Read and change your data on parmalogica.ru

    *://*.parmalogica.ru/*

  • Read and change your data on parma.tech

    *://*.parma.tech/*

  • Read and change your data on 188.254.71.82

    *://188.254.71.82/*

  • Read and change your data on fsa.gov.ru

    *://*.fsa.gov.ru/*

  • Read and change your data on 10.250.65.20

    *://10.250.65.20/*

  • Read and change your data on 10.250.74.23

    *://10.250.74.23/*

  • Read and change your data on client.uc-em.ru

    *://client.uc-em.ru/*

  • Read and change your data on smvtest.uc-em.ru

    *://smvtest.uc-em.ru/*

  • Read and change your data on 37.230.149.203

    *://37.230.149.203/*

  • Read and change your data on 87.245.138.173

    *://87.245.138.173/*

  • Read and change your data on 37.230.149.204

    *://37.230.149.204/*

  • Read and change your data on investmoscow.ru

    *://*.investmoscow.ru/*

  • Read and change your data on tektorg.ru

    *://*.tektorg.ru/*

  • Read and change your data on mpgu.srvdev.ru

    *://*.mpgu.srvdev.ru/*

  • Read and change your data on 94.79.51.229

    *://94.79.51.229/*

  • Read and change your data on 178.208.145.110

    *://178.208.145.110/*

  • Read and change your data on asdu-fpa-esep.cdu.so

    *://asdu-fpa-esep.cdu.so/*

  • Read and change your data on 176.192.74.54

    *://176.192.74.54/*

  • Read and change your data on fsa.orbita.center

    *://*.fsa.orbita.center/*

  • Read and change your data on mcx.ru

    *://*.mcx.ru/*

  • Read and change your data on 10.0.3.184

    *://10.0.3.184/*

  • Read and change your data on mos.uc-em.ru

    *://mos.uc-em.ru/*

  • Read and change your data on mostest.uc-em.ru

    *://mostest.uc-em.ru/*

  • Talk to a program installed on your computer, outside the browser's sandbox

    nativeMessaging

  • Keep running in the background while your browser is open

    background

Updated 30 September 2026ndhkcelnoeacagmhbidalbidnkjeokma