Is Zoom Image safe?

Zoom Image opens a plain HTTP page on every extension update, exposing users to unencrypted content from the developer's server.

Each time the extension updates, it automatically opens a tab to a plain HTTP URL at crossblade.her.jp. Because the connection is unencrypted, a network attacker positioned between the user and that server could serve arbitrary HTML or JavaScript in the newly-opened tab. No user data is collected or transmitted by the extension itself.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.