Is Скачать музыку с ВК safe?
Скачать музыку с ВК sends each page's referrer and its stored UUID to static.vkdownloader.ru from an all-site content script.
It runs notification.js on every website, reads document.referrer, base64-encodes it, and requests an image URL containing the extension UUID and referrer. Its background worker also asks vkdownloader.ru for configuration that can install server-provided declarativeNetRequest session rules under broad host permissions.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Findings
Navigation sends referrer and stored UUID to vkdownloader.ru.
Navigating to pages makes the extension send the page referrer and a persistent value from extension storage to static.vkdownloader.ru.
Dynamic analysis confirmed a GET with a stored UUID-like value and a base64-encoded referrer URL.
The user navigates to a page.
The extension reads its stored uuid value, encodes the page referrer, and sends both values to static.vkdownloader.ru.
| Field | Value | Why it matters | |
|---|---|---|---|
Page referrer | https://www.amazon.com/ | Shows the page that referred the current browsing context; dynamic analysis observed it encoded in the request path. | |
Stored UUID | 5F84I2CFFF94VZ3TQ6OX7GVIZBWMFU91 | A persistent value from extension storage can connect requests from the same browser profile over time. |
Observed during dynamic analysis, the referrer segment in the request path decoded to https://www.amazon.com/.
Remote config can install browsing request rules under all-site access.
On start, install, or its daily alarm, the extension fetches config from vkdownloader.ru.
If the response includes declarativeNetRequest rules, it stores and applies them under its all-site access, affecting URLs and headers site-wide.
The user has the extension installed while it checks remote configuration.
The extension can install server-supplied declarativeNetRequest session rules under all-URL host access.
| Field | Value | Why it matters | |
|---|---|---|---|
Your browsing URL | https://example.com/page (illustrative) | A rule condition can match URLs under the extension's all-site host access. | |
Request headers | User-Agent: Mozilla/5.0 (illustrative) | A rule action can affect request headers for matched browsing requests. |
Dynamic analysis confirmed that the extension fetches remote configuration, stores any returned dnr-rules entries with assigned IDs, and applies their actions and conditions through declarativeNetRequest session rules while holding all-site host access.