Is Image Downloader safe?

Medium risk

Image Downloader rewrites outgoing request Referer headers to the active tab's origin while its popup scans a page.

When you open the popup on an HTTP or HTTPS page, Image Downloader installs a browser request listener that applies to all URLs. While that popup context is active, it removes existing Referer and Origin headers from matching requests and replaces the Referer with the origin of the active tab, so unrelated requests can receive that page origin as their Referer.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

Suricata Techv3.9.0Firefox Add-ons
46Risk
Who publishes it

Suricata Tech - no other listings under this identity, 3 shared hostnames

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
Suricata Tech
Website
suricata.software/en/image_downloader

Shared hosts - 3 hostnames

Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.

clippingmagic.com
Also called by 2 other listings, including Image Downloader | Suricata
go.getproton.me
Also called by 3 other listings, including Image Downloader | Suricata
suricata.software
Also called by 6 other listings, including Image Downloader | Suricata

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 3.9.0. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on every site you visit

    <all_urls>

  • Act on the current tab, but only after you click the extension

    activeTab

  • Run its own code inside the pages you visit

    scripting

  • See the address and title of every tab you have open

    tabs

  • Store data in your browser

    storage

  • Start, monitor and manage your downloads

    downloads

  • See, disable and uninstall your other extensions, including your security ones

    management

  • Block and redirect the requests your browser makes

    declarativeNetRequest

  • Watch every request your browser makes

    webRequest

  • Watch, block and rewrite every request your browser makes

    webRequestBlocking

  • Sign you in with your Google account

    identity

Updated 30 September 2026amo-2862512