Transfer of Ownership

Flag items where ownership has been transferred to a different publisher, which may indicate compromise or changes in trustworthiness.

medium

Unverified Publisher

Flags items published by entities that haven’t gone through the publisher verification process of the marketplace. Lack of verification may indicate higher risk, as the publisher’s identity and trustworthiness are unconfirmed.

medium

Low Install Count

Flags items lacking installs on the marketplace, suggesting concerns about the extension's reputation and the publisher's reliability.

low

Extension Purpose and Intention

FocusLead is a Chrome extension designed to enhance WhatsApp Web functionalities, allowing users to manage leads, send mass messages, export contacts, and create a CRM funnel for better sales management.

Code Insights

  • API Calls and Network Activity
    • The extension interacts with several external services, primarily hosted on wascript.com.br and related domains:
      • https://painel.wascript.com.br/ for backend operations.
      • https://multi-atendimento.wascript.com.br and https://api-whatsapp.wascript.com.br for WebSocket connections.
      • https://domselector.watidy.com/index.php for DOM selector updates.
      • https://app.watools.com.br/api/public/waTidy-logs for logging errors.
    • The extension fetches data from these endpoints to update DOM selectors and manage notifications.
  • Local Storage and Data Handling

    • Utilizes chrome.storage.local to store user data such as notifications, contacts, and CRM-related information.

    • Example of data retrieval:

      chrome.storage.local.get([e], function(s) {
  s[e] === void 0 ? o() : t(s[e]);
});
  • Alarms and Scheduling

    • Sets up periodic alarms to trigger updates and notifications:

      • One_Minute, Five_Minutes, Ten_Minutes, and Thirty_Minutes intervals for various update tasks.

    • Example of alarm setup:

      chrome.alarms.create("One_Minute", {periodInMinutes: 1});
  • User Interface Interactions
    • Opens and reloads WhatsApp Web tabs as needed.
    • Creates new tabs for CRM interface and handles uninstall URL redirection.
  • Security and Privacy Considerations
    • The extension claims not to use external databases, indicating all operations occur locally on the user's computer.
    • Approved by Google Chrome security audit, suggesting compliance with standard security practices.

Conclusion

The FocusLead extension appears to be focused on enhancing user experience with WhatsApp Web by providing additional CRM functionalities and managing user interactions efficiently. The network communications and API calls are consistent with its stated purpose, and there are no strong indicators of malicious behavior such as data exfiltration or unauthorized code execution.

Compliance

Compliance status and certifications for the extension and its publisher

Extensao.store

The website extensao.store has declared that they achieved ISO 27001 certification in December 2023, confirming their compliance with this standard. There is no indication of a parent company or any mention of its compliance status.

Compliant

Licenses

No license text available...