Is Ответы к UzTest.ru - UzTest+ safe?
UzTest+ sends quiz question text from uztest.ru to dz-helper.ru to retrieve pre-computed answers.
The extension injects a 'Find answer' button next to quiz questions on uztest.ru. When clicked, it sends the question's HTML content, along with an auth key tied to a dz-helper.ru account balance, to dz-helper.ru's API in an unencrypted GET request, then displays the returned answer on the page. The extension also authenticates to dz-helper.ru using cookies on every page load to check the user's login and balance status.
Who publishes itOKExtensions - 4 other listings from the same operator, 1 of them carrying a finding
OKExtensions - 4 other listings from the same operator, 1 of them carrying a finding
What this publisher told the store about itself, and the other listings that told it the same thing.
Same store account
4 other listings published from this account, 20k+ users between them. 1 of them carries a finding.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
What it can do
Permissions this extension asks for, as declared in version 1.0.5. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Read and change your data on uztest.ru
http://uztest.ru/*
Where it sends data
Destinations our analysis observed Ответы к UzTest.ru - UzTest+ contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- dz-helper.ru
Ответы к UzTest.ru - UzTest+ sends data to dz-helper.ru. 2 other extensions we have analyzed send data here.