Is YouTube Video Downloader Pro safe?

Medium risk

YouTube Video Downloader Pro sends its phone-download button to an unrelated campaign site.

When a user clicks the popup's Download For Phone button, the extension opens a URL on furyprosecutionkitchen.com instead of using the selected YouTube video or quality. Its normal download flow also sends the entered YouTube video ID to Google's YouTube Data API to fetch video details.

Nexus Software Inc.v2.0Firefox Add-ons
45Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Findings

Download button opens a third-party campaign URL.

Clicking the popup's download-for-phone button opens a third-party campaign URL instead of the selected video URL and quality.

The request goes to furyprosecutionkitchen.com and can expose your IP address to that site.

Severity
Medium unwanted
Type
Unexpected
CWE
CWE-506
Source
Dynamic sandbox
What actually happens
You did this

The user clicks the popup's download-for-phone button.

The extension did this

The extension opens a third-party campaign URL instead of using the selected video URL.

Captured request
GEThttps://furyprosecutionkitchen.com/v45q7sb9ub?key=redacted
Fields in the request
  • Your IP address
    203.0.113.42 (illustrative)

    The remote site receives the network address used for the navigation, which can indicate approximate location and network provider.

Observation

Verification confirmed that the popup button's click handler opens this remote URL while ignoring the selected video URL and quality values.

What it can do

Permissions this extension asks for, as declared in version 2.0. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on www.googleapis.com

    https://www.googleapis.com/

  • Act on the current tab, but only after you click the extension

    activeTab

Where it sends data

Destinations our analysis observed YouTube Video Downloader Pro contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • www.googleapis.comwidely used

    YouTube Video Downloader Pro sends data to www.googleapis.com. A widely used service: 44 other extensions we have analysed send data here.

  • furyprosecutionkitchen.com

    YouTube Video Downloader Pro sends data to furyprosecutionkitchen.com. One other extension we have analysed sends data here.

Updated 30 September 2026amo-2852131