Is Netflix Subtitles & Dictionary safe?
Netflix Subtitles & Dictionary is medium risk. Uninstalling Netflix Subtitles & Dictionary makes Chrome open an appforlanguage.com uninstall URL carrying stored extension data: the stored email, last Netflix viewing URL, last visited site marker, and stored subtitle language selections.
Who publishes itApp For Language - 4 other listings from the same operator, 2 of them carrying a finding
App For Language - 4 other listings from the same operator, 2 of them carrying a finding
What this publisher told the store about itself, and the other listings that told it the same thing.
Same store account
4 other listings published from this account, 111k+ users between them. 2 of them carry a finding.
Shared hosts - 12 hostnames
Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Findings
Uninstall URL sends Netflix viewing context to appforlanguage.com
Uninstalling Netflix Subtitles & Dictionary makes Chrome open an appforlanguage.com uninstall URL carrying stored extension data: the stored email, last Netflix viewing URL, last visited site marker, and stored subtitle language selections.
- Severity
- Medium unwanted
- Type
- Unexpected
- CWE
- CWE-359
- Source
- Dynamic sandbox
The user uninstalls the extension.
The extension causes Chrome to open an appforlanguage.com uninstall URL containing stored email and Netflix viewing context as query parameters.
- Your Netflix page URLhttps://www.netflix.com/watch/81234567 (illustrative)
Identifies the Netflix page that was stored as the last watched movie link.
- Your browsing history contextnetflix (illustrative)
Shows that the stored last visited website value was Netflix.
- Stored extension dataemail=user@example.com, upperLang=en, lowerLang=es (illustrative)
Includes stored email and subtitle language values read from extension storage before the uninstall URL is set.
Dynamic analysis confirmed that the uninstall URL is built from stored email, last visited website, last watched Netflix URL, and subtitle language values before Chrome opens it during uninstall.