Is Leadskatcher safe?
Leadskatcher lets any website embed WhatsApp Web and read groups, chats and contacts or send messages.
The extension injects a script into WhatsApp Web that accepts commands from any embedding page without checking its origin, and it removes the frame-blocking headers from web.whatsapp.com. A web page can therefore load WhatsApp Web in an iframe and request group lists, group chat messages, the account's own number and name, or send WhatsApp messages. Replies are posted back to the embedding page.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Where it sends data
Destinations our analysis observed Leadskatcher contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- web.whatsapp.com
Leadskatcher sends data to web.whatsapp.com. 16 other extensions we have analyzed send data here.