Am I Being Pwned? logoAm I Being Pwned?
Book a demo
HomeWebsite Downloader
Findings · 3
+1 more finding locked
MEDIUM FINDINGS · 3
  1. 01Amplitude analytics SDK tracks page domain, page URL, page path, and page title of the sidepanel context, plus user actions (downloads, rating interactions, onboarding steps) with persistent clientId and deviceId
  2. 02Service worker fetches arbitrary URLs on behalf of the offscreen document during multi-page crawl, using host_permissions: <all_urls>, bypassing any CORS or SameSite restrictions that would otherwise apply in a normal browser context
  3. 03Tinybird telemetry transmits userId, userAgent, language, timezone, platform, browser, extensionId, version, and downloaded page URL to remote analytics pipeline on every download action
+1 more finding locked
OTHER EXTENSIONS

Is Website Downloader safe?

Medium risk

No summary available.

feedforward.softwarev3.0.17Chrome Web Store
45Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Findings

+1 more finding not shown

Book a call to see all findingsScan your browser
Updated 30 May 2026iaaokenmfgahhlcfbdipjonlkeinadaa

Am I Being Pwned?

Protecting organizations from malicious browser extensions.

© 2026 Bay Area Labs Inc. All rights reserved.

BlogHow it worksSecurityFor VendorsFAQAPI DocsPrivacy PolicyTerms of ServiceContact