Is Image Duke safe?

Question

Is Image Duke safe?

Accepted Answer

Image Duke is high risk. Our dynamic analysis confirmed that Image Duke fetches a header-manipulation ruleset from extconfig.pages.dev/config/netrule.json and applies it via Chrome's declarativeNetRequest API. The bundled ruleset already strips Reddit's Content-Security-Policy header, widens CORS on 26 sites, and forges Referer headers on ~80 domains. The remote server can update these rules without notifying the user — adding new sites or new rule types — without a Chrome Web Store update or any user prompt.

Is Bulk Image downloader - Image Duke safe?

Findings