Am I Being Pwned? logoAm I Being Pwned?
Book a demo
Home迅雷下载支持
Findings · 3
MEDIUM FINDINGS · 3
  1. 01New batched analytics SDK transmits user behavior and peerId to rcv-xldc.xunlei.com/sync_data
  2. 02New cloud resource API sends detected page download URLs to x-api-pan.xunlei.com/drive/v1/resource/list
  3. 03v3.53.3 introduces a new RiskCheck IPC path: the videoTag content-script component collects the candidate video/download URL, derived filename, document.title, and window.location.href, then relays them via chrome.runtime.sendMessage("RiskCheck") to the service worker, which POSTs them to api-shoulei-ssl.xunlei.com/xlppc.blacklist.api/v1/risk/check with appid=XCLOUD, scene=YUNPAN_PLUG_GET_LINK. Triggered on every video-tag download-button render and user click on any http/https page.
OTHER EXTENSIONS

Is 迅雷下载支持 safe?

Medium risk

No summary available.

Shenzhen Xunlei Network Technology Co., Ltd.v3.53.2Chrome Web Store
45Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Findings

Updated 30 May 2026ncennffkjdiamlpmcbajkmaiiiddgioo

Am I Being Pwned?

Protecting organizations from malicious browser extensions.

© 2026 Bay Area Labs Inc. All rights reserved.

BlogHow it worksSecurityFor VendorsFAQAPI DocsPrivacy PolicyTerms of ServiceContact