Is StreamFab M3U8 Downloader safe?

Clean risk

StreamFab M3U8 Downloader forwards request URLs, headers and cookies from every page to its local StreamFab desktop app.

The extension watches all http(s) requests in the browser and records each URL, headers, request body and the related cookies. It passes this data over native messaging to the installed StreamFab desktop app (com.dvdfab.streamfab.m3u8.coapp), which uses it to find and download streams. The captured data goes to the local app, not to a remote server.

dvdfab2003v1.0.0.1Chrome Web Store
0Risk
Who publishes it

dvdfab2003 - 4 other listings from the same operator, 1 of them carrying a finding

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
dvdfab2003

Same store account

4 other listings published from this account, 2k+ users between them. 1 of them carries a finding.

Shared hosts - 9 hostnames

Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.

app-api-j1.dvdfab.cn
Also called by 1 other listing
auth-us.dvdfab.cn
Also called by 1 other listing
bs-manager.streamfab.com
Also called by 1 other listing
dvdfab.cn
Also called by 1 other listing
dvdfabstore.com
Also called by 1 other listing
otel-us.dvdfab.me
Also called by 1 other listing: streamfab onlyfans downlo
otel.proxy.allfab.cn
Also called by 1 other listing: streamfab onlyfans downlo
streamfab.tw
Also called by 1 other listing: streamfab onlyfans downlo
web-backend-us.dvdfab.cn
Also called by 1 other listing: streamfab onlyfans downlo

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Where it sends data

Destinations our analysis observed StreamFab M3U8 Downloader contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • com.dvdfab.streamfab.m3u8.coapp (local StreamFab native host)

    StreamFab M3U8 Downloader sends data to com.dvdfab.streamfab.m3u8.coapp (local StreamFab native host). Named as a recipient in this extension's own analysis.

Updated 15 October 2026baeaefehkpgejfcnplgmkipdicbfmkag