Is Relacción Lite safe?

Low risk

Relacción Lite rewrites WhatsApp Web's security headers and sends your phone number and licence key to api.sincodigo.pro.

On WhatsApp Web, the extension removes the page's Content-Security-Policy and Permissions-Policy, replaces them with a policy that allows unsafe-eval and scripts from whatsup.plus and wforw.plus, and blocks WhatsApp's killswitch, update-check and crash-log endpoints. When WhatsApp Web loads, it also sends your WhatsApp phone number, licence key and a device ID to a licence server at api.sincodigo.pro.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

Relacción Litev2.1.9Chrome Web Store
17Risk
Who publishes it

Relacción Lite - no other listings under this identity, 5 shared hostnames

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
Relacción Lite
Website
www.relaccion.com/privacy

Shared hosts - 5 hostnames

Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.

wforw.plus
Also called by 4 other listings, including Zampi CRM PRO: Mensajes Masivos, Chatbots, Embudos de Ventas para WhatsApp.
whatsup.plus
Also called by 4 other listings, including Zampi CRM PRO: Mensajes Masivos, Chatbots, Embudos de Ventas para WhatsApp.
go.wawf.app
Also called by 5 other listings
crashlogs.whatsapp.net
Also called by 6 other listings, including Perfect Sender
graph.whatsapp.com
Also called by 6 other listings, including Zampi CRM PRO: Mensajes Masivos, Chatbots, Embudos de Ventas para WhatsApp., Perfect Sender

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 2.1.9. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on whatsapp.com

    *://*.whatsapp.com/*

  • Read and change your data on whatsup.plus

    *://whatsup.plus/*

  • Read and change your data on whatsapp.net

    *://*.whatsapp.net/*

  • See the address and title of every tab you have open

    tabs

  • Store data in your browser

    storage

  • Store an unlimited amount of data in your browser

    unlimitedStorage

  • Show you desktop notifications

    notifications

  • Sign you in with your Google account

    identity

  • See the email address of your Google account

    identity.email

  • See, disable and uninstall your other extensions, including your security ones

    management

  • Block and redirect the requests your browser makes

    declarativeNetRequest

Where it sends data

Destinations our analysis observed Relacción Lite contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • api.sincodigo.pro

    Relacción Lite sends data to api.sincodigo.pro. No other extension we have analysed sends data here.

  • wforw.plus

    Relacción Lite sends data to wforw.plus. No other extension we have analysed sends data here.

  • whatsup.plus

    Relacción Lite sends data to whatsup.plus. No other extension we have analysed sends data here.