Is Online Photo Tool - with Batch Download safe?

Clean risk

Online Photo Tool maintains a hidden pinned Google tab to silently perform keyword searches and click target URLs on behalf of paying clients.

The extension operates a remote-controlled click-fraud engine: after a five-day delay, it opens a permanently pinned Google tab and receives search tasks via a Pusher WebSocket connection. It types keywords into Google, selects and clicks specific result URLs using weighted randomisation, and reports outcomes back to refresh.saveimageastype.com. On install, the extension also creates a persistent user identity and sends telemetry events—such as pinned-tab interactions and uninstall dates—to the same server.

saveimageastypev1.5.6Chrome Web Store
0Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Where it sends data

Destinations our analysis observed Online Photo Tool contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • pusher.com

    Online Photo Tool sends data to pusher.com. No other extension we have analysed sends data here.

  • refresh.saveimageastype.com

    Online Photo Tool sends data to refresh.saveimageastype.com. No other extension we have analysed sends data here.

Updated 30 September 2026aninmieokgdbdcgoiglchhhhbpnpolja