Is WA Contact Extractor & Groups Link Finder safe?
WA Contact Extractor is medium risk. Opening the popup reads your Google profile email and stored WhatsApp phone number, then posts them to wagd-backend-3ccfa2db16ea.herokuapp.com/api/user as an email and phoneNumber JSON payload.
Who publishes itrahul.1990tech - 3 other listings from the same operator, 1 of them carrying a finding
rahul.1990tech - 3 other listings from the same operator, 1 of them carrying a finding
What this publisher told the store about itself, and the other listings that told it the same thing.
Same store account
3 other listings published from this account, 9k+ users between them. 1 of them carries a finding.
Shared hosts - 2 hostnames
Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Findings
Popup sends Google email and WhatsApp phone to developer backend on open
Opening the popup reads your Google profile email and stored WhatsApp phone number, then posts them to wagd-backend-3ccfa2db16ea.herokuapp.com/api/user as an email and phoneNumber JSON payload.
- Severity
- Medium unwanted
- Type
- Unexpected
- CWE
- CWE-359
- Source
- Dynamic sandbox
The user opens the extension popup.
The extension posts the Google account email and WhatsApp phone number to the developer backend.
- Your IP address203.0.113.24 (illustrative)
The backend can receive network-level connection metadata when the request is made.
- Your account identifieruser@example.com (illustrative)
The request includes account and contact identifiers such as the Google email and WhatsApp phone number described in the claim.