Is V Video Downloader PoVim safe?

Medium risk

PoVim is medium risk. On install, V Video Downloader PoVim creates a persistent user ID in Chrome sync storage and sends it to info.userlistingstats.com for remote config and tracking. The ID can persist across Chrome profiles that sync extension data.…

aalberustinv1.9Chrome Web Store
45Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Findings

SeverityMEDIUM
ClassUNWANTED
TypeUnexpected
CWECWE-200
SourceAI SANDBOX

Persistent user ID sent to userlistingstats every 6 hours

On install, V Video Downloader PoVim creates a persistent user ID in Chrome sync storage and sends it to info.userlistingstats.com for remote config and tracking.

The ID can persist across Chrome profiles that sync extension data.

01EvidenceCAUSE EFFECT
What actually happens
You did this

The user installs the extension.

The extension did this

The extension creates a persistent user ID and sends it to info.userlistingstats.com for remote configuration and tracking.

02EvidenceNETWORK CAPTURE
Captured request
GEThttps://info.userlistingstats.com/promo2.json?ud=jsm1i7-8d3j9mpo-4x5pgh4tm-1c7k&_n=povim
03EvidenceFIELD TABLE
Fields in the request
FieldValueWhy it matters
Stored user identifier
jsm1i7-8d3j9mpo-4x5pgh4tm-1c7kA persistent value from Chrome sync storage can link repeated requests from the same browser profile.
SeverityMEDIUM
ClassUNWANTED
TypeUnexpected
CWECWE-200
SourceAI SANDBOX

Cross-device visit tracking links browsing activity for 30 days

As you browse, V Video Downloader PoVim caches visited domains for 30 days and uses a synced identifier that persists across devices.

The confirmed request to info.userlistingstats.com includes that identifier, linking history to storage.

01EvidenceCAUSE EFFECT
What actually happens
You did this

You navigate to web pages during normal browsing.

The extension did this

The extension keeps a 30-day domain visit cache and uses a synced user identifier when contacting info.userlistingstats.com.

02EvidenceNETWORK CAPTURE
Captured request
POSThttps://info.userlistingstats.com/promo2.json
03EvidenceFIELD TABLE
Fields in the request
FieldValueWhy it matters
Visited domain history
example.comShows which domains have triggered extension activity within the 30-day cache window.
Synced extension identifier
jsm1i7-8d3j9mpo-4x5pgh4tm-1c7kLinks requests to the same browser profile across sessions and devices through chrome.storage.sync.
04EvidencePLAIN NOTE
Observation

Dynamic analysis confirmed the outbound request carrying the stored user identifier. The database evidence also records a 30-day cache duration for domains that previously triggered affiliate tabs.

Updated 21 September 2026pahfjgdhbjfpmeanibapkglolhkocoaj