Is "Messenger Magic" on Chrome Web Store Safe to Install?

[email protected] · chrome · v3.0.3

Your Messenger inbox is full of buyers. MSG Exporter helps you find them. MSG Exporter is a Chrome extension that transforms Facebook Messenger conversations into structured sales intelligence. Export messages, run deep AI analysis, score leads, surface hidden testimonials, map buyer personalities, and process your entire inbox on autopilot — all without leaving your browser. :rocket: CORE FEATURES One-Click Message Export Export any Messenger conversation instantly — every message, sender, and timestamp, automatically scrolled and captured. Download as JSON, CSV, or both. Real-time progress. Stop and save anytime. AI-Powered Conversation Analysis Click "Analyze with AI" and get a comprehensive breakdown streamed in real time: • Lead bio & relationship classification • Sales potential rating (None → High) • Key topics, objections & friction points • Notable moments & turning points • Testimonial discovery with quality ratings • Actionable next steps & re-engagement strategy • 3–5 copy-paste-ready follow-up messages Ask follow-up questions after analysis — the AI retains full context. Buyer Personality Profiling (BOLT Framework) Every contact is classified into one of four buyer types: :ox: Bull — Lead with outcomes, skip the small talk :owl: Owl — Give data, specs, and proof :sheep: Lamb — Build rapport, earn trust first :tiger: Tiger — Sell the vision, match their energy Psychological Profiling (Big Five) AI-built personality assessments based on real messaging patterns — Openness, Conscientiousness, Extraversion, Agreeableness, Neuroticism — rated and summarized for every contact. Profile Enrichment Automatically visits Facebook profiles to extract bio, work history, education, location, contact info, profile picture description, banner image analysis, and up to 10 recent posts with engagement metrics. Runs manually or automatically as part of every export. Lead Scoring & Status Tracking Every contact gets a 1–10 lead score and one of 7 status levels (Hot → Dead), plus relationship type classification. Filterable, sortable, always visible on contact cards. Testimonial Discovery The AI exhaustively searches every conversation for praise, endorsements, and positive feedback. Verbatim quotes captured with quality ratings (Gold, Strong, Moderate, Weak) and recommendations for which marketing channels each works best for. Follow-up Reminders & AI Sequences Set follow-up dates and let AI draft a personalized 3-message sequence (Day 3 / Day 7 / Day 14) based on conversation context, lead score, and relationship type. Never lose track of a warm lead again. Autopilot Mode The most powerful feature. One click processes your entire inbox — export, enrich, analyze, save, archive — conversation by conversation, automatically. Smart duplicate detection. Runs in the background even with the popup closed. :bar_chart: INTELLIGENCE ACROSS ALL CONVERSATIONS The AI Insights tab analyzes patterns across your entire contact base: • Sales pipeline health & funnel breakdown • Communication gaps & missed buying signals • Testimonial Goldmine — every piece of social proof, organized • Objection Library — every objection ranked by frequency, with tested response scripts • Audience Pain & Desire Map — real psychographic data from real conversations • Competitor Intelligence — every mention, with win/loss patterns and positioning suggestions • Winning Conversation Templates — message playbooks extracted from your highest-converting threads • Knowledge Base / AI Clone Builder — turn your conversation history into a training dataset for your own AI autoresponder :gear: BUILT FOR POWER USERS • Choose your AI model: Gemini 2.0 Flash, GPT-4o, Claude Sonnet 4, and more — via OpenRouter • 4 automation toggles: auto-analyze, auto-save, auto-enrich, auto-archive • Grid & list views with advanced search, filters, and sorting • Analysis history — up to 10 snapshots per contact • Email extraction from conversations and profile pages • All data stored locally in your browser — your data stays yours WHO IT'S FOR • Coaches, consultants & service providers selling through DMs • Network marketers & social sellers • Recruiters managing conversations at scale • Anyone who closes deals through Facebook Messenger REQUIREMENTS • OpenRouter API key (free to create; pay only for what you use) • Active Facebook/Messenger account • Chrome browser

Risk Assessment

Analyzed
92.14
out of 100
CRITICAL

396 security findings detected across all analyzers

Chrome extension requesting 14 permissions

Severity Breakdown

0
Critical
0
High
324
Medium
72
Low
0
Info

Finding Categories

4
Network
299
IoC Indicators

YARA Rules Matched

12 rules(72 hits)
postinstall file manipulation postinstall system command postinstall file download NoUseWeakRandom postinstall crypto operations postinstall environment access postinstall obfuscation postinstall network communication SQLInjection AlertStatementsShouldNotBeUsed postinstall persistence mechanism credential env files

Requested Permissions

14 permissions
<all_urls>

Access and modify data on every website you visit

Dangerous
activeTab
Medium
tabs
Medium
scripting
Low
storage
Low
unlimitedStorage
Low
alarms
Low
https://www.messenger.com/*
Low
https://messenger.com/*
Low
https://www.facebook.com/*
Low
https://facebook.com/*
Low
https://openrouter.ai/*
Low
https://app.kyubi.io/*
Low
https://znzbrdsgwzhyscdlxrln.supabase.co/*
Low

About This Extension

Your Messenger inbox is full of buyers. MSG Exporter helps you find them. MSG Exporter is a Chrome extension that transforms Facebook Messenger conversations into structured sales intelligence. Export messages, run deep AI analysis, score leads, surface hidden testimonials, map buyer personalities, and process your entire inbox on autopilot — all without leaving your browser. :rocket: CORE FEATURES One-Click Message Export Export any Messenger conversation instantly — every message, sender, and timestamp, automatically scrolled and captured. Download as JSON, CSV, or both. Real-time progress. Stop and save anytime. AI-Powered Conversation Analysis Click "Analyze with AI" and get a comprehensive breakdown streamed in real time: • Lead bio & relationship classification • Sales potential rating (None → High) • Key topics, objections & friction points • Notable moments & turning points • Testimonial discovery with quality ratings • Actionable next steps & re-engagement strategy • 3–5 copy-paste-ready follow-up messages Ask follow-up questions after analysis — the AI retains full context. Buyer Personality Profiling (BOLT Framework) Every contact is classified into one of four buyer types: :ox: Bull — Lead with outcomes, skip the small talk :owl: Owl — Give data, specs, and proof :sheep: Lamb — Build rapport, earn trust first :tiger: Tiger — Sell the vision, match their energy Psychological Profiling (Big Five) AI-built personality assessments based on real messaging patterns — Openness, Conscientiousness, Extraversion, Agreeableness, Neuroticism — rated and summarized for every contact. Profile Enrichment Automatically visits Facebook profiles to extract bio, work history, education, location, contact info, profile picture description, banner image analysis, and up to 10 recent posts with engagement metrics. Runs manually or automatically as part of every export. Lead Scoring & Status Tracking Every contact gets a 1–10 lead score and one of 7 status levels (Hot → Dead), plus relationship type classification. Filterable, sortable, always visible on contact cards. Testimonial Discovery The AI exhaustively searches every conversation for praise, endorsements, and positive feedback. Verbatim quotes captured with quality ratings (Gold, Strong, Moderate, Weak) and recommendations for which marketing channels each works best for. Follow-up Reminders & AI Sequences Set follow-up dates and let AI draft a personalized 3-message sequence (Day 3 / Day 7 / Day 14) based on conversation context, lead score, and relationship type. Never lose track of a warm lead again. Autopilot Mode The most powerful feature. One click processes your entire inbox — export, enrich, analyze, save, archive — conversation by conversation, automatically. Smart duplicate detection. Runs in the background even with the popup closed. :bar_chart: INTELLIGENCE ACROSS ALL CONVERSATIONS The AI Insights tab analyzes patterns across your entire contact base: • Sales pipeline health & funnel breakdown • Communication gaps & missed buying signals • Testimonial Goldmine — every piece of social proof, organized • Objection Library — every objection ranked by frequency, with tested response scripts • Audience Pain & Desire Map — real psychographic data from real conversations • Competitor Intelligence — every mention, with win/loss patterns and positioning suggestions • Winning Conversation Templates — message playbooks extracted from your highest-converting threads • Knowledge Base / AI Clone Builder — turn your conversation history into a training dataset for your own AI autoresponder :gear: BUILT FOR POWER USERS • Choose your AI model: Gemini 2.0 Flash, GPT-4o, Claude Sonnet 4, and more — via OpenRouter • 4 automation toggles: auto-analyze, auto-save, auto-enrich, auto-archive • Grid & list views with advanced search, filters, and sorting • Analysis history — up to 10 snapshots per contact • Email extraction from conversations and profile pages • All data stored locally in your browser — your data stays yours WHO IT'S FOR • Coaches, consultants & service providers selling through DMs • Network marketers & social sellers • Recruiters managing conversations at scale • Anyone who closes deals through Facebook Messenger REQUIREMENTS • OpenRouter API key (free to create; pay only for what you use) • Active Facebook/Messenger account • Chrome browser

Detailed Findings

77 total

YARA Rule Matches

12 rules

Indicators of Compromise

Network indicators, suspicious strings, and potential IoCs extracted during analysis

URLs
34
IP Addresses
8
Domains
258
Strings
299

All Indicators · 299

Domain
detected Domain: ctx.save

XIOC detected Domain: ctx.save

extracted_from_files

IP
detected IP: e::af

XIOC detected IP: e::af

extracted_from_files

IP
detected IP: ea::

XIOC detected IP: ea::

extracted_from_files

IP
detected IP: ::af

XIOC detected IP: ::af

extracted_from_files

Domain
detected Domain: e.store

XIOC detected Domain: e.store

extracted_from_files

Domain
detected Domain: window.open

XIOC detected Domain: window.open

extracted_from_files

Domain
detected Domain: www.facebook.com

XIOC detected Domain: www.facebook.com

extracted_from_files

Domain
detected Domain: openrouter.ai

XIOC detected Domain: openrouter.ai

extracted_from_files

Domain
detected Domain: section-icon.red

XIOC detected Domain: section-icon.red

extracted_from_files

Domain
detected Domain: section-icon.orange

XIOC detected Domain: section-icon.orange

extracted_from_files

Domain
detected Domain: section-icon.green

XIOC detected Domain: section-icon.green

extracted_from_files

Domain
detected Domain: c.bio

XIOC detected Domain: c.bio

extracted_from_files

Domain
detected Domain: e.recentposts.map

XIOC detected Domain: e.recentposts.map

extracted_from_files

Domain
detected Domain: e.links.map

XIOC detected Domain: e.links.map

extracted_from_files

Domain
detected Domain: e.education

XIOC detected Domain: e.education

extracted_from_files

Domain
detected Domain: e.work

XIOC detected Domain: e.work

extracted_from_files

Domain
detected Domain: e.bio

XIOC detected Domain: e.bio

extracted_from_files

Domain
detected Domain: t.email

XIOC detected Domain: t.email

extracted_from_files

Domain
detected Domain: e.name

XIOC detected Domain: e.name

extracted_from_files

Domain
detected Domain: t.read

XIOC detected Domain: t.read

extracted_from_files

Domain
detected Domain: x.map

XIOC detected Domain: x.map

extracted_from_files

Domain
detected Domain: e.date

XIOC detected Domain: e.date

extracted_from_files

Domain
detected Domain: c.recentposts.map

XIOC detected Domain: c.recentposts.map

extracted_from_files

Domain
detected Domain: c.education

XIOC detected Domain: c.education

extracted_from_files

Domain
detected Domain: c.work

XIOC detected Domain: c.work

extracted_from_files

Domain
detected Domain: t.target

XIOC detected Domain: t.target

extracted_from_files

Domain
detected Domain: s.style.top

XIOC detected Domain: s.style.top

extracted_from_files

Domain
detected Domain: a.id

XIOC detected Domain: a.id

extracted_from_files

Domain
detected Domain: l.click

XIOC detected Domain: l.click

extracted_from_files

Domain
detected Domain: a.read

XIOC detected Domain: a.read

extracted_from_files

Domain
detected Domain: a.map

XIOC detected Domain: a.map

extracted_from_files

Domain
detected Domain: t.id

XIOC detected Domain: t.id

extracted_from_files

Domain
detected Domain: e.id

XIOC detected Domain: e.id

extracted_from_files

Domain
detected Domain: d.id

XIOC detected Domain: d.id

extracted_from_files

Domain
detected Domain: date.now

XIOC detected Domain: date.now

extracted_from_files

Domain
detected Domain: n.click

XIOC detected Domain: n.click

extracted_from_files

Domain
detected Domain: n.download

XIOC detected Domain: n.download

extracted_from_files

Domain
detected Domain: n.target

XIOC detected Domain: n.target

extracted_from_files

Domain
detected Domain: t.style.top

XIOC detected Domain: t.style.top

extracted_from_files

Domain
detected Domain: e.map

XIOC detected Domain: e.map

extracted_from_files

Domain
detected Domain: window.location.search

XIOC detected Domain: window.location.search

extracted_from_files

Domain
detected Domain: e.sequence.map

XIOC detected Domain: e.sequence.map

extracted_from_files

Domain
detected Domain: e.audit.total

XIOC detected Domain: e.audit.total

extracted_from_files

Domain
detected Domain: audit.total

XIOC detected Domain: audit.total

extracted_from_files

Domain
detected Domain: www.messenger.com

XIOC detected Domain: www.messenger.com

extracted_from_files

Domain
detected Domain: d.stats.total

XIOC detected Domain: d.stats.total

extracted_from_files

Domain
detected Domain: o.id

XIOC detected Domain: o.id

extracted_from_files

Domain
detected Domain: t.auto

XIOC detected Domain: t.auto

extracted_from_files

Domain
detected Domain: l.tab.id

XIOC detected Domain: l.tab.id

extracted_from_files

Domain
detected Domain: l.tab

XIOC detected Domain: l.tab

extracted_from_files

Domain
detected Domain: n.email

XIOC detected Domain: n.email

extracted_from_files

Domain
detected Domain: t.store

XIOC detected Domain: t.store

extracted_from_files

Domain
detected Domain: n.map

XIOC detected Domain: n.map

extracted_from_files

Domain
detected Domain: s.map

XIOC detected Domain: s.map

extracted_from_files

Domain
detected Domain: t.work

XIOC detected Domain: t.work

extracted_from_files

Domain
detected Domain: t.bio

XIOC detected Domain: t.bio

extracted_from_files

Domain
detected Domain: e.record.id

XIOC detected Domain: e.record.id

extracted_from_files

Domain
detected Domain: y.auto

XIOC detected Domain: y.auto

extracted_from_files

Domain
detected Domain: t.map

XIOC detected Domain: t.map

extracted_from_files

Domain
detected Domain: o.auto

XIOC detected Domain: o.auto

extracted_from_files

Domain
detected Domain: d.education

XIOC detected Domain: d.education

extracted_from_files

Domain
detected Domain: d.work

XIOC detected Domain: d.work

extracted_from_files

Domain
detected Domain: d.bio

XIOC detected Domain: d.bio

extracted_from_files

Domain
detected Domain: i.id

XIOC detected Domain: i.id

extracted_from_files

Domain
detected Domain: r.id

XIOC detected Domain: r.id

extracted_from_files

Domain
detected Domain: n.id

XIOC detected Domain: n.id

extracted_from_files

Domain
detected Domain: u.total

XIOC detected Domain: u.total

extracted_from_files

Domain
detected Domain: m.map

XIOC detected Domain: m.map

extracted_from_files

Domain
detected Domain: t.click

XIOC detected Domain: t.click

extracted_from_files

Domain
detected Domain: e.top

XIOC detected Domain: e.top

extracted_from_files

Domain
detected Domain: h.id

XIOC detected Domain: h.id

extracted_from_files

Domain
detected Domain: f.map

XIOC detected Domain: f.map

extracted_from_files

Domain
detected Domain: g.total

XIOC detected Domain: g.total

extracted_from_files

Domain
detected Domain: d.recentposts.map

XIOC detected Domain: d.recentposts.map

extracted_from_files

Domain
detected Domain: b.name

XIOC detected Domain: b.name

extracted_from_files

Domain
detected Domain: www.mybiz.com

XIOC detected Domain: www.mybiz.com

extracted_from_files

Domain
detected Domain: www.xyz.com

XIOC detected Domain: www.xyz.com

extracted_from_files

Domain
detected Domain: lm.facebook.com

XIOC detected Domain: lm.facebook.com

extracted_from_files

Domain
detected Domain: l.facebook.com

XIOC detected Domain: l.facebook.com

extracted_from_files

Domain
detected Domain: nodefilter.show

XIOC detected Domain: nodefilter.show

extracted_from_files

Domain
detected Domain: e.click

XIOC detected Domain: e.click

extracted_from_files

Domain
detected Domain: i.work

XIOC detected Domain: i.work

extracted_from_files

Domain
detected Domain: e.pro

XIOC detected Domain: e.pro

extracted_from_files

Domain
detected Domain: r.map

XIOC detected Domain: r.map

extracted_from_files

Domain
detected Domain: s.bio

XIOC detected Domain: s.bio

extracted_from_files

Domain
detected Domain: b.education

XIOC detected Domain: b.education

extracted_from_files

Domain
detected Domain: b.work

XIOC detected Domain: b.work

extracted_from_files

Domain
detected Domain: b.bio

XIOC detected Domain: b.bio

extracted_from_files

Domain
detected Domain: n.bio

XIOC detected Domain: n.bio

extracted_from_files

Domain
detected Domain: e.media

XIOC detected Domain: e.media

extracted_from_files

Domain
detected Domain: g.id

XIOC detected Domain: g.id

extracted_from_files

Domain
detected Domain: g.map

XIOC detected Domain: g.map

extracted_from_files

Domain
detected Domain: t.total

XIOC detected Domain: t.total

extracted_from_files

Domain
detected Domain: o.name

XIOC detected Domain: o.name

extracted_from_files

Domain
detected Domain: i.bio

XIOC detected Domain: i.bio

extracted_from_files

Domain
detected Domain: m.enrichmentsummary.bio

XIOC detected Domain: m.enrichmentsummary.bio

extracted_from_files

Domain
detected Domain: u.map

XIOC detected Domain: u.map

extracted_from_files

Domain
detected Domain: e.auto

XIOC detected Domain: e.auto

extracted_from_files

Domain
detected Domain: n.contact

XIOC detected Domain: n.contact

extracted_from_files

Domain
detected Domain: r.name

XIOC detected Domain: r.name

extracted_from_files

Domain
detected Domain: n.education

XIOC detected Domain: n.education

extracted_from_files

Domain
detected Domain: n.work

XIOC detected Domain: n.work

extracted_from_files

Domain
detected Domain: o.click

XIOC detected Domain: o.click

extracted_from_files

Domain
detected Domain: t.top

XIOC detected Domain: t.top

extracted_from_files

Domain
detected Domain: e.show

XIOC detected Domain: e.show

extracted_from_files

Domain
detected Domain: submitbtn.click

XIOC detected Domain: submitbtn.click

extracted_from_files

Domain
detected Domain: user.email

XIOC detected Domain: user.email

extracted_from_files

Domain
detected Domain: stored.store

XIOC detected Domain: stored.store

extracted_from_files

Domain
detected Domain: e.style

XIOC detected Domain: e.style

extracted_from_files

Domain
detected Domain: i.top

XIOC detected Domain: i.top

extracted_from_files

Domain
detected Domain: n.top-e.top

XIOC detected Domain: n.top-e.top

extracted_from_files

Domain
detected Domain: t.name

XIOC detected Domain: t.name

extracted_from_files

Domain
detected Domain: h.top

XIOC detected Domain: h.top

extracted_from_files

Domain
detected Domain: d.top

XIOC detected Domain: d.top

extracted_from_files

Domain
detected Domain: o.top-e.top

XIOC detected Domain: o.top-e.top

extracted_from_files

Domain
detected Domain: i.click

XIOC detected Domain: i.click

extracted_from_files

Domain
detected Domain: a.top

XIOC detected Domain: a.top

extracted_from_files

Domain
detected Domain: a.top-i.top

XIOC detected Domain: a.top-i.top

extracted_from_files

Domain
detected Domain: n.top-i.top

XIOC detected Domain: n.top-i.top

extracted_from_files

Domain
detected Domain: o.top

XIOC detected Domain: o.top

extracted_from_files

Domain
detected Domain: container.top

XIOC detected Domain: container.top

extracted_from_files

Domain
detected Domain: rect.top

XIOC detected Domain: rect.top

extracted_from_files

Domain
detected Domain: n.top

XIOC detected Domain: n.top

extracted_from_files

Domain
detected Domain: t.clienty-r.top

XIOC detected Domain: t.clienty-r.top

extracted_from_files

Domain
detected Domain: fbexp-ov-log-entry.info

XIOC detected Domain: fbexp-ov-log-entry.info

extracted_from_files

Domain
detected Domain: t.top-n.top

XIOC detected Domain: t.top-n.top

extracted_from_files

Domain
detected Domain: o.map

XIOC detected Domain: o.map

extracted_from_files

Domain
detected Domain: n.style

XIOC detected Domain: n.style

extracted_from_files

Domain
detected Domain: n.top-t.top

XIOC detected Domain: n.top-t.top

extracted_from_files

Domain
detected Domain: d.top-i.top

XIOC detected Domain: d.top-i.top

extracted_from_files

Domain
detected Domain: p.work

XIOC detected Domain: p.work

extracted_from_files

Domain
detected Domain: p.bio

XIOC detected Domain: p.bio

extracted_from_files

Domain
detected Domain: n.total

XIOC detected Domain: n.total

extracted_from_files

Domain
detected Domain: o.bg

XIOC detected Domain: o.bg

extracted_from_files

Domain
detected Domain: o.contact

XIOC detected Domain: o.contact

extracted_from_files

Domain
detected Domain: e.total

XIOC detected Domain: e.total

extracted_from_files

Domain
detected Domain: e.style.top

XIOC detected Domain: e.style.top

extracted_from_files

Domain
detected Domain: i.bg

XIOC detected Domain: i.bg

extracted_from_files

Domain
detected Domain: s.id

XIOC detected Domain: s.id

extracted_from_files

Domain
detected Domain: i.intel

XIOC detected Domain: i.intel

extracted_from_files

Domain
detected Domain: t.contact

XIOC detected Domain: t.contact

extracted_from_files

Domain
detected Domain: u.do

XIOC detected Domain: u.do

extracted_from_files

Domain
detected Domain: t.education

XIOC detected Domain: t.education

extracted_from_files

Domain
detected Domain: ne.id

XIOC detected Domain: ne.id

extracted_from_files

Domain
detected Domain: e.do

XIOC detected Domain: e.do

extracted_from_files

Domain
detected Domain: e.intel

XIOC detected Domain: e.intel

extracted_from_files

Domain
detected Domain: c.do

XIOC detected Domain: c.do

extracted_from_files

Domain
detected Domain: o.education

XIOC detected Domain: o.education

extracted_from_files

Domain
detected Domain: o.work

XIOC detected Domain: o.work

extracted_from_files

Domain
detected Domain: o.bio

XIOC detected Domain: o.bio

extracted_from_files

Domain
detected Domain: p.total

XIOC detected Domain: p.total

extracted_from_files

Domain
detected Domain: r.top-t.top

XIOC detected Domain: r.top-t.top

extracted_from_files

Domain
detected Domain: r.contact

XIOC detected Domain: r.contact

extracted_from_files

Domain
detected Domain: a.name

XIOC detected Domain: a.name

extracted_from_files

Domain
detected Domain: val.green

XIOC detected Domain: val.green

extracted_from_files

Domain
detected Domain: o.style.top

XIOC detected Domain: o.style.top

extracted_from_files

Domain
detected Domain: section-icon.blue

XIOC detected Domain: section-icon.blue

extracted_from_files

Domain
detected Domain: window.innerheight-r.top

XIOC detected Domain: window.innerheight-r.top

extracted_from_files

Domain
detected Domain: r.top

XIOC detected Domain: r.top

extracted_from_files

Domain
detected Domain: p.date

XIOC detected Domain: p.date

extracted_from_files

Domain
detected Domain: e.top-o.top

XIOC detected Domain: e.top-o.top

extracted_from_files

Domain
detected Domain: o.date

XIOC detected Domain: o.date

extracted_from_files

Domain
detected Domain: a.total

XIOC detected Domain: a.total

extracted_from_files

Domain
detected Domain: indexeddb.open

XIOC detected Domain: indexeddb.open

extracted_from_files

Domain
detected Domain: t.style

XIOC detected Domain: t.style

extracted_from_files

Domain
detected Domain: app.kyubi.io

XIOC detected Domain: app.kyubi.io

extracted_from_files

Domain
detected Domain: u.at

XIOC detected Domain: u.at

extracted_from_files

Domain
detected Domain: q.cl

XIOC detected Domain: q.cl

extracted_from_files

Domain
detected Domain: ji.pn

XIOC detected Domain: ji.pn

extracted_from_files

Domain
detected Domain: rk.ps

XIOC detected Domain: rk.ps

extracted_from_files

Domain
detected Domain: link.click

XIOC detected Domain: link.click

extracted_from_files

Domain
detected Domain: link.download

XIOC detected Domain: link.download

extracted_from_files

Domain
detected Domain: testimonial-type-badge.business

XIOC detected Domain: testimonial-type-badge.business

extracted_from_files

Domain
detected Domain: testimonial-card.business

XIOC detected Domain: testimonial-card.business

extracted_from_files

Domain
detected Domain: kb-chat-body.open

XIOC detected Domain: kb-chat-body.open

extracted_from_files

Domain
detected Domain: www.messengermagic.com

XIOC detected Domain: www.messengermagic.com

extracted_from_files

Domain
detected Domain: tier5.us

XIOC detected Domain: tier5.us

extracted_from_files

Domain
detected Domain: partner.tier5.us

XIOC detected Domain: partner.tier5.us

extracted_from_files

Domain
detected Domain: www.tier5.us

XIOC detected Domain: www.tier5.us

extracted_from_files

Domain
detected Domain: m.email

XIOC detected Domain: m.email

extracted_from_files

Domain
detected Domain: g.store

XIOC detected Domain: g.store

extracted_from_files

Domain
detected Domain: performance.now

XIOC detected Domain: performance.now

extracted_from_files

Domain
detected Domain: val.orange

XIOC detected Domain: val.orange

extracted_from_files

Domain
detected Domain: tq-tag.business

XIOC detected Domain: tq-tag.business

extracted_from_files

Domain
detected Domain: tq-tag.gold

XIOC detected Domain: tq-tag.gold

extracted_from_files

Domain
detected Domain: detail-body.no

XIOC detected Domain: detail-body.no

extracted_from_files

Domain
detected Domain: t.dataset.id

XIOC detected Domain: t.dataset.id

extracted_from_files

Domain
detected Domain: t.dataset.page

XIOC detected Domain: t.dataset.page

extracted_from_files

Domain
detected Domain: g.bg

XIOC detected Domain: g.bg

extracted_from_files

Domain
detected Domain: zn.map

XIOC detected Domain: zn.map

extracted_from_files

Domain
detected Domain: t.dataset.tab

XIOC detected Domain: t.dataset.tab

extracted_from_files

Domain
detected Domain: e.dataset.tab

XIOC detected Domain: e.dataset.tab

extracted_from_files

Domain
detected Domain: e.target

XIOC detected Domain: e.target

extracted_from_files

Domain
detected Domain: ge.bio

XIOC detected Domain: ge.bio

extracted_from_files

Domain
detected Domain: n.style.top

XIOC detected Domain: n.style.top

extracted_from_files

Domain
detected Domain: ie.bio

XIOC detected Domain: ie.bio

extracted_from_files

Domain
detected Domain: ie.work

XIOC detected Domain: ie.work

extracted_from_files

Domain
detected Domain: o.total

XIOC detected Domain: o.total

extracted_from_files

Domain
detected Domain: s.bg

XIOC detected Domain: s.bg

extracted_from_files

Domain
detected Domain: w.bg

XIOC detected Domain: w.bg

extracted_from_files

Domain
detected Domain: ge.interests.map

XIOC detected Domain: ge.interests.map

extracted_from_files

Domain
detected Domain: ge.emailsfound.map

XIOC detected Domain: ge.emailsfound.map

extracted_from_files

Domain
detected Domain: ge.phonenumbers.map

XIOC detected Domain: ge.phonenumbers.map

extracted_from_files

Domain
detected Domain: ge.education.map

XIOC detected Domain: ge.education.map

extracted_from_files

Domain
detected Domain: ge.education

XIOC detected Domain: ge.education

extracted_from_files

Domain
detected Domain: ge.work.map

XIOC detected Domain: ge.work.map

extracted_from_files

Domain
detected Domain: ge.work

XIOC detected Domain: ge.work

extracted_from_files

Domain
detected Domain: e.run

XIOC detected Domain: e.run

extracted_from_files

Domain
detected Domain: actions.map

XIOC detected Domain: actions.map

extracted_from_files

Domain
detected Domain: improvement.map

XIOC detected Domain: improvement.map

extracted_from_files

Domain
detected Domain: working.map

XIOC detected Domain: working.map

extracted_from_files

Domain
detected Domain: n.intel

XIOC detected Domain: n.intel

extracted_from_files

Domain
detected Domain: ve.date

XIOC detected Domain: ve.date

extracted_from_files

Domain
detected Domain: ge.links.map

XIOC detected Domain: ge.links.map

extracted_from_files

Domain
detected Domain: s.click

XIOC detected Domain: s.click

extracted_from_files

Domain
detected Domain: s.download

XIOC detected Domain: s.download

extracted_from_files

Domain
detected Domain: te.messages.map

XIOC detected Domain: te.messages.map

extracted_from_files

Domain
detected Domain: te.id

XIOC detected Domain: te.id

extracted_from_files

Domain
detected Domain: n.read

XIOC detected Domain: n.read

extracted_from_files

Domain
detected Domain: p.sequence.map

XIOC detected Domain: p.sequence.map

extracted_from_files

Domain
detected Domain: ze.map

XIOC detected Domain: ze.map

extracted_from_files

Domain
detected Domain: pn.map

XIOC detected Domain: pn.map

extracted_from_files

Domain
detected Domain: t.total-e.total

XIOC detected Domain: t.total-e.total

extracted_from_files

Domain
detected Domain: s.date

XIOC detected Domain: s.date

extracted_from_files

Domain
detected Domain: e.dataset.page

XIOC detected Domain: e.dataset.page

extracted_from_files

Domain
detected Domain: window.innerheight-s.top

XIOC detected Domain: window.innerheight-s.top

extracted_from_files

Domain
detected Domain: l.map

XIOC detected Domain: l.map

extracted_from_files

Domain
detected Domain: e.dataset.id

XIOC detected Domain: e.dataset.id

extracted_from_files

Domain
detected Domain: www.messengermgc.com

XIOC detected Domain: www.messengermgc.com

extracted_from_files

Domain
detected Domain: s.read

XIOC detected Domain: s.read

extracted_from_files

Domain
detected Domain: p.id

XIOC detected Domain: p.id

extracted_from_files

Domain
detected Domain: t.date

XIOC detected Domain: t.date

extracted_from_files

Domain
detected Domain: a.date

XIOC detected Domain: a.date

extracted_from_files

Domain
detected Domain: e.mentionedcontact.id

XIOC detected Domain: e.mentionedcontact.id

extracted_from_files

Domain
detected Domain: on.map

XIOC detected Domain: on.map

extracted_from_files

Domain
detected Domain: znzbrdsgwzhyscdlxrln.supabase.co

XIOC detected Domain: znzbrdsgwzhyscdlxrln.supabase.co

extracted_from_files

IP
detected IP: ::bef

XIOC detected IP: ::bef

extracted_from_files

Domain
detected Domain: e.generatedoptions.map

XIOC detected Domain: e.generatedoptions.map

extracted_from_files

Domain
detected Domain: d.read

XIOC detected Domain: d.read

extracted_from_files

IP
detected IP: e::

XIOC detected IP: e::

extracted_from_files

Domain
detected Domain: dn.map

XIOC detected Domain: dn.map

extracted_from_files

Domain
detected Domain: i.read

XIOC detected Domain: i.read

extracted_from_files

Domain
detected Domain: messengermagic.com

XIOC detected Domain: messengermagic.com

extracted_from_files

Domain
detected Domain: i.target

XIOC detected Domain: i.target

extracted_from_files

Domain
detected Domain: window.innerheight-e.top

XIOC detected Domain: window.innerheight-e.top

extracted_from_files

Domain
detected Domain: r.style.top

XIOC detected Domain: r.style.top

extracted_from_files

Domain
detected Domain: u.name

XIOC detected Domain: u.name

extracted_from_files

Domain
detected Domain: i.name

XIOC detected Domain: i.name

extracted_from_files

Domain
detected Domain: model-selector-item-price.free

XIOC detected Domain: model-selector-item-price.free

extracted_from_files

Domain
detected Domain: t.tab.id

XIOC detected Domain: t.tab.id

extracted_from_files

Domain
detected Domain: ue.id

XIOC detected Domain: ue.id

extracted_from_files

Domain
detected Domain: n.auto

XIOC detected Domain: n.auto

extracted_from_files

Domain
detected Domain: he.store

XIOC detected Domain: he.store

extracted_from_files

Domain
detected Domain: o.email

XIOC detected Domain: o.email

extracted_from_files

Domain
detected Domain: n.store

XIOC detected Domain: n.store

extracted_from_files

Domain
detected Domain: e.email

XIOC detected Domain: e.email

extracted_from_files

URL
detected URL: https://openrouter.ai/api/v1/chat/completions

XIOC detected URL: https://openrouter.ai/api/v1/chat/completions

extracted_from_files

URL
detected URL: https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700;800&display=swap');

XIOC detected URL: https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700;800&display=swap');

extracted_from_files

Other
detected Email: [email protected]

XIOC detected Email: [email protected]

extracted_from_files

Domain
detected Domain: start.friender.io

XIOC detected Domain: start.friender.io

extracted_from_files

Domain
detected Domain: e.data

XIOC detected Domain: e.data

extracted_from_files

Domain
detected Domain: o.download

XIOC detected Domain: o.download

extracted_from_files

Domain
detected Domain: u.id

XIOC detected Domain: u.id

extracted_from_files

URL
detected URL: https://www.facebook.com

XIOC detected URL: https://www.facebook.com

extracted_from_files

URL
detected URL: https://www.facebook.com/messages/t/$

XIOC detected URL: https://www.facebook.com/messages/t/$

extracted_from_files

URL
detected URL: https://fonts.googleapis.com/css2?family=DM+Sans:wght@300;400;500;600&display=swap');

XIOC detected URL: https://fonts.googleapis.com/css2?family=DM+Sans:wght@300;400;500;600&display=swap');

extracted_from_files

URL
detected URL: https://www.facebook.com/messages

XIOC detected URL: https://www.facebook.com/messages

extracted_from_files

URL
detected URL: http://

XIOC detected URL: http://

extracted_from_files

URL
detected URL: https://app.kyubi.io/api/end-user/login

XIOC detected URL: https://app.kyubi.io/api/end-user/login

extracted_from_files

URL
detected URL: https://www.facebook.com/messages/e2ee/t/

XIOC detected URL: https://www.facebook.com/messages/e2ee/t/

extracted_from_files

URL
detected URL: https://www.messenger.com/t/tier5development

XIOC detected URL: https://www.messenger.com/t/tier5development

extracted_from_files

URL
detected URL: https://partner.tier5.us/jrpartnership

XIOC detected URL: https://partner.tier5.us/jrpartnership

extracted_from_files

URL
detected URL: https://www.tier5.us/

XIOC detected URL: https://www.tier5.us/

extracted_from_files

URL
detected URL: https://app.kyubi.io/

XIOC detected URL: https://app.kyubi.io/

extracted_from_files

URL
detected URL: https://app.kyubi.io/api/end-user/get-status

XIOC detected URL: https://app.kyubi.io/api/end-user/get-status

extracted_from_files

URL
detected URL: https://app.kyubi.io/api/end-user/update-password

XIOC detected URL: https://app.kyubi.io/api/end-user/update-password

extracted_from_files

URL
detected URL: https://app.kyubi.io/api/end-user/generate-password-token

XIOC detected URL: https://app.kyubi.io/api/end-user/generate-password-token

extracted_from_files

URL
detected URL: https://openrouter.ai/keys

XIOC detected URL: https://openrouter.ai/keys

extracted_from_files

URL
detected URL: https://www.messengermagic.com/

XIOC detected URL: https://www.messengermagic.com/

extracted_from_files

URL
detected URL: https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700;800&family=Space+Mono:wght@400;700&display=swap');

XIOC detected URL: https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700;800&family=Space+Mono:wght@400;700&display=swap');

extracted_from_files

URL
detected URL: https://app.kyubi.io/api/notification-view

XIOC detected URL: https://app.kyubi.io/api/notification-view

extracted_from_files

URL
detected URL: https://app.kyubi.io/api/clear-subscription-object

XIOC detected URL: https://app.kyubi.io/api/clear-subscription-object

extracted_from_files

URL
detected URL: https://www.facebook.com/*

XIOC detected URL: https://www.facebook.com/*

extracted_from_files

URL
detected URL: https://messenger.com/*

XIOC detected URL: https://messenger.com/*

extracted_from_files

URL
detected URL: https://www.messenger.com/*

XIOC detected URL: https://www.messenger.com/*

extracted_from_files

URL
detected URL: https://clients2.google.com/service/update2/crx

XIOC detected URL: https://clients2.google.com/service/update2/crx

extracted_from_files

URL
detected URL: https://www.messengermgc.com

XIOC detected URL: https://www.messengermgc.com

extracted_from_files

URL
detected URL: https://fonts.googleapis.com/css2?family=Space+Mono:wght@400;700&family=DM+Sans:wght@300;400;500;600&display=swap');

XIOC detected URL: https://fonts.googleapis.com/css2?family=Space+Mono:wght@400;700&family=DM+Sans:wght@300;400;500;600&display=swap');

extracted_from_files

URL
detected URL: https://openrouter.ai/api/v1/models

XIOC detected URL: https://openrouter.ai/api/v1/models

extracted_from_files

URL
detected URL: https://facebook.com/*

XIOC detected URL: https://facebook.com/*

extracted_from_files

URL
detected URL: https://znzbrdsgwzhyscdlxrln.supabase.co/*

XIOC detected URL: https://znzbrdsgwzhyscdlxrln.supabase.co/*

extracted_from_files

URL
detected URL: https://app.kyubi.io/*

XIOC detected URL: https://app.kyubi.io/*

extracted_from_files

URL
detected URL: https://openrouter.ai/*

XIOC detected URL: https://openrouter.ai/*

extracted_from_files

URL
detected URL: https://znzbrdsgwzhyscdlxrln.supabase.co

XIOC detected URL: https://znzbrdsgwzhyscdlxrln.supabase.co

extracted_from_files

URL
detected URL: https://znzbrdsgwzhyscdlxrln.supabase.co/functions/v1

XIOC detected URL: https://znzbrdsgwzhyscdlxrln.supabase.co/functions/v1

extracted_from_files

Domain
detected Domain: db.open

XIOC detected Domain: db.open

extracted_from_files

Domain
detected Domain: s.name

XIOC detected Domain: s.name

extracted_from_files

IP
detected IP: e::bef

XIOC detected IP: e::bef

extracted_from_files

Domain
detected Domain: is.map

XIOC detected Domain: is.map

extracted_from_files

Security Analysis Summary

Security Analysis Overview

Messenger Magic is a Chrome Web Store extension published by [email protected]. Version 3.0.3 has been analyzed by the Risky Plugins security platform, receiving a risk score of 92.14/100 (CRITICAL risk) based on 396 security findings.

Risk Assessment

This extension presents critical security risk. Severe issues were detected, potentially including malware indicators, exposed secrets, or dangerous behaviors. Installation is strongly discouraged until these issues are addressed.

Findings Breakdown

  • Medium: 324 finding(s)
  • Low: 72 finding(s)

What Was Analyzed

The security assessment covers multiple analysis categories:

  • Malware Detection: YARA rule matching against 2,400+ malware signatures
  • Secret Detection: Scanning for exposed API keys, tokens, and credentials
  • Static Analysis: Code-level security analysis for common vulnerability patterns
  • Network Analysis: Detection of suspicious network communications and endpoints
  • Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

Messenger Magic is published by [email protected] on the Chrome Web Store marketplace. The extension has approximately 71 users.

Recommendation

This extension is not recommended for installation without thorough manual review. Consider alternatives with lower risk scores, or contact the developer to address the identified security concerns.

Frequently Asked Questions