Is Скачать музыку с ВК safe?
Скачать музыку с ВК sends each page's referrer and its stored UUID to static.vkdownloader.ru from an all-site content script.
It runs notification.js on every website, reads document.referrer, base64-encodes it, and requests an image URL containing the extension UUID and referrer. Its background worker also asks vkdownloader.ru for configuration that can install server-provided declarativeNetRequest session rules under broad host permissions.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Findings
Navigation sends referrer and stored UUID to vkdownloader.ru.
Navigating to pages makes the extension send the page referrer and a persistent value from extension storage to static.vkdownloader.ru.
Dynamic analysis confirmed a GET with a stored UUID-like value and a base64-encoded referrer URL.
What actually happens
The user navigates to a page.
The extension reads its stored uuid value, encodes the page referrer, and sends both values to static.vkdownloader.ru.
Captured request
Fields in the request
- Page referrerhttps://www.amazon.com/
Shows the page that referred the current browsing context; dynamic analysis observed it encoded in the request path.
- Stored UUID5F84I2CFFF94VZ3TQ6OX7GVIZBWMFU91
A persistent value from extension storage can connect requests from the same browser profile over time.
Observation
Observed during dynamic analysis, the referrer segment in the request path decoded to https://www.amazon.com/.
Remote config can install browsing request rules under all-site access.
On start, install, or its daily alarm, the extension fetches config from vkdownloader.ru.
If the response includes declarativeNetRequest rules, it stores and applies them under its all-site access, affecting URLs and headers site-wide.
What actually happens
The user has the extension installed while it checks remote configuration.
The extension can install server-supplied declarativeNetRequest session rules under all-URL host access.
Captured request
Fields affected by the server-supplied request rules
- Your browsing URLhttps://example.com/page (illustrative)
A rule condition can match URLs under the extension's all-site host access.
- Request headersUser-Agent: Mozilla/5.0 (illustrative)
A rule action can affect request headers for matched browsing requests.
Observation
Dynamic analysis confirmed that the extension fetches remote configuration, stores any returned dnr-rules entries with assigned IDs, and applies their actions and conditions through declarativeNetRequest session rules while holding all-site host access.
Where it sends data
Destinations our analysis observed Скачать музыку с ВК contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- static.vkdownloader.ru
Скачать музыку с ВК sends data to static.vkdownloader.ru. No other extension we have analyzed sends data here.
- vkdownloader.ru
Скачать музыку с ВК sends data to vkdownloader.ru. No other extension we have analyzed sends data here.