Is WASendBulk Bulk WhatsApp Sender for FREE safe?
WASendBulk sends WhatsApp profile details, page telemetry, and outgoing links to Google Analytics and backend services.
On WhatsApp Web, its injected WA-JS code sends page URL, referrer, title, language, screen/session identifiers, and engagement events to Google Analytics. Opening the extension popup requests the user's WhatsApp phone number and display name from the page and posts that profile to its Cloud Run backend. Outgoing WhatsApp links are also submitted to configured link-preview services before message delivery.
Who publishes itYupma - no other listings under this identity
Yupma - no other listings under this identity
What this publisher told the store about itself, and the other listings that told it the same thing.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Findings
Outgoing WhatsApp links are sent to third-party preview services.
Sending a WhatsApp link through WASendBulk Bulk WhatsApp Sender for FREE makes the extension send that URL to link-preview services before delivery: cobrancas.uppermesh.com.br, wajsapi.titanchat.com.br, wppc-linkpreview.cloudtrix.com.br.
- Severity
- Medium unwanted
- Type
- Unexpected
- CWE
- CWE-200
- Source
- Dynamic sandbox
The user sends a WhatsApp message through the extension.
The extension sends outgoing link URLs to third-party link-preview services before delivery.
- Outgoing link URLhttps://example.com/article (illustrative)
The URL from the WhatsApp message is sent to the preview service so it can fetch link-preview data.
Dynamic analysis confirmed that message sending routes through the extension's WhatsApp send flow and that link-preview generation uses third-party preview services.
Where it sends data
Destinations our analysis observed WASendBulk Bulk WhatsApp Sender for FREE contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- analytics.google.comwidely used
WASendBulk Bulk WhatsApp Sender for FREE sends data to analytics.google.com. A widely used service: 25 other extensions we have analysed send data here.
- wajsapi.titanchat.com.br
WASendBulk Bulk WhatsApp Sender for FREE sends data to wajsapi.titanchat.com.br. 12 other extensions we have analysed send data here.
- wppc-linkpreview.cloudtrix.com.br
WASendBulk Bulk WhatsApp Sender for FREE sends data to wppc-linkpreview.cloudtrix.com.br. 12 other extensions we have analysed send data here.
- cobrancas.uppermesh.com.br
WASendBulk Bulk WhatsApp Sender for FREE sends data to cobrancas.uppermesh.com.br. 8 other extensions we have analysed send data here.
- app-iizduyvkvq-uc.a.run.app
WASendBulk Bulk WhatsApp Sender for FREE sends data to app-iizduyvkvq-uc.a.run.app. No other extension we have analysed sends data here.