Is "Shortfy – Smart URL Shortener" on Chrome Web Store Safe to Install?

[email protected] · chrome · v2.2.1

Shorten, Customize, and Track Links Instantly with Shortfy! 🚀 Shortfy is a powerful and lightweight URL shortener extension that allows you to transform long, clunky URLs into short, branded, and trackable links with just one click. Whether you are sharing on social media, running a marketing campaign, or sending a quick message, Shortfy makes your links look professional and clean. This extension is the official companion to Shortfy.xyz, our primary platform for link management. ✨ Why Choose Shortfy? Most URL shorteners are cluttered with ads or force you to sign up. Shortfy.xyz is different. It is fast, ad-free, and respects your freedom. You can shorten links anonymously for quick tasks or log in to save and manage them permanently. 🔧 Key Features Unlimited Shortening: Shorten as many links as you need without any restrictions. Custom Shortcodes: Create memorable links with your own custom alias (e.g., shortfy.xyz/my-link). Instant QR Codes: Every shortened link automatically generates a QR code that you can display or download. Real-Time Analytics: Track link performance with detailed insights including click counts, geographic location, device type, and browser info. User Dashboard: Access and manage all your saved links in one central place through your Shortfy account. 🚀 How It Works Navigate to the webpage you want to shorten. Open the Shortfy extension; it automatically detects your current tab's URL. Click Shorten URL. Instantly copy your link, view the QR code, or jump to the Analytics page to see your stats. 🌍 Our Mission At Shortfy.xyz, we believe link sharing should be simple and fast. Built with a focus on speed and user experience, our platform is used globally to help users regain control over their digital sharing. Install Shortfy today and give your links the professional edge they deserve!

Risk Assessment

Analyzed
84.98
out of 100
HIGH

33 security findings detected across all analyzers

Chrome extension requesting 7 permissions

Severity Breakdown

0
Critical
7
High
26
Medium
0
Low
0
Info

Finding Categories

7
Malware Signatures
5
Network
20
IoC Indicators

YARA Rules Matched

7 rules
postinstall system command postinstall crypto operations SQLInjection postinstall file manipulation AlertStatementsShouldNotBeUsed postinstall file download postinstall environment access

Requested Permissions

7 permissions
activeTab
Medium
tabs
Medium
clipboardWrite
Low
storage
Low
https://skkhandokar22.pythonanywhere.com/*
Low
https://api.qrserver.com/*
Low
https://shortfy.xyz/*
Low

About This Extension

Shorten, Customize, and Track Links Instantly with Shortfy! 🚀 Shortfy is a powerful and lightweight URL shortener extension that allows you to transform long, clunky URLs into short, branded, and trackable links with just one click. Whether you are sharing on social media, running a marketing campaign, or sending a quick message, Shortfy makes your links look professional and clean. This extension is the official companion to Shortfy.xyz, our primary platform for link management. ✨ Why Choose Shortfy? Most URL shorteners are cluttered with ads or force you to sign up. Shortfy.xyz is different. It is fast, ad-free, and respects your freedom. You can shorten links anonymously for quick tasks or log in to save and manage them permanently. 🔧 Key Features Unlimited Shortening: Shorten as many links as you need without any restrictions. Custom Shortcodes: Create memorable links with your own custom alias (e.g., shortfy.xyz/my-link). Instant QR Codes: Every shortened link automatically generates a QR code that you can display or download. Real-Time Analytics: Track link performance with detailed insights including click counts, geographic location, device type, and browser info. User Dashboard: Access and manage all your saved links in one central place through your Shortfy account. 🚀 How It Works Navigate to the webpage you want to shorten. Open the Shortfy extension; it automatically detects your current tab's URL. Click Shorten URL. Instantly copy your link, view the QR code, or jump to the Analytics page to see your stats. 🌍 Our Mission At Shortfy.xyz, we believe link sharing should be simple and fast. Built with a focus on speed and user experience, our platform is used globally to help users regain control over their digital sharing. Install Shortfy today and give your links the professional edge they deserve!

Detailed Findings

13 total

YARA Rule Matches

7 rules

Indicators of Compromise

Network indicators, suspicious strings, and potential IoCs extracted during analysis

URLs
10
IP Addresses
1
Domains
10
Strings
20

All Indicators · 20

IP
detected IP: ::

XIOC detected IP: ::

extracted_from_files

URL
detected URL: https://shortfy.xyz';

XIOC detected URL: https://shortfy.xyz';

extracted_from_files

URL
detected URL: https://skkhandokar22.pythonanywhere.com/api';

XIOC detected URL: https://skkhandokar22.pythonanywhere.com/api';

extracted_from_files

URL
detected URL: https://api.qrserver.com/v1/create-qr-code/?size=140x140&data=$

XIOC detected URL: https://api.qrserver.com/v1/create-qr-code/?size=140x140&data=$

extracted_from_files

URL
detected URL: https://shortfy.xyz/analytics/$

XIOC detected URL: https://shortfy.xyz/analytics/$

extracted_from_files

URL
detected URL: https://www.google.com/s2/favicons?sz=64&domain=$

XIOC detected URL: https://www.google.com/s2/favicons?sz=64&domain=$

extracted_from_files

Domain
detected Domain: items.map

XIOC detected Domain: items.map

extracted_from_files

Domain
detected Domain: item.id

XIOC detected Domain: item.id

extracted_from_files

URL
detected URL: https://clients2.google.com/service/update2/crx

XIOC detected URL: https://clients2.google.com/service/update2/crx

extracted_from_files

URL
detected URL: https://skkhandokar22.pythonanywhere.com/*

XIOC detected URL: https://skkhandokar22.pythonanywhere.com/*

extracted_from_files

URL
detected URL: https://api.qrserver.com/*

XIOC detected URL: https://api.qrserver.com/*

extracted_from_files

URL
detected URL: https://shortfy.xyz/*

XIOC detected URL: https://shortfy.xyz/*

extracted_from_files

URL
detected URL: https://shortfy.xyz

XIOC detected URL: https://shortfy.xyz

extracted_from_files

Domain
detected Domain: clients2.google.com

XIOC detected Domain: clients2.google.com

extracted_from_files

Domain
detected Domain: skkhandokar22.pythonanywhere.com

XIOC detected Domain: skkhandokar22.pythonanywhere.com

extracted_from_files

Domain
detected Domain: api.qrserver.com

XIOC detected Domain: api.qrserver.com

extracted_from_files

Domain
detected Domain: shortfy.xyz

XIOC detected Domain: shortfy.xyz

extracted_from_files

Domain
detected Domain: www.google.com

XIOC detected Domain: www.google.com

extracted_from_files

Domain
detected Domain: btn.id

XIOC detected Domain: btn.id

extracted_from_files

Domain
detected Domain: qrbox.id

XIOC detected Domain: qrbox.id

extracted_from_files

Security Analysis Summary

Security Analysis Overview

Shortfy – Smart URL Shortener is a Chrome Web Store extension published by [email protected]. Version 2.2.1 has been analyzed by the Risky Plugins security platform, receiving a risk score of 84.98/100 (HIGH risk) based on 33 security findings.

Risk Assessment

This extension presents critical security risk. Severe issues were detected, potentially including malware indicators, exposed secrets, or dangerous behaviors. Installation is strongly discouraged until these issues are addressed.

Findings Breakdown

  • High: 7 finding(s)
  • Medium: 26 finding(s)

What Was Analyzed

The security assessment covers multiple analysis categories:

  • Malware Detection: YARA rule matching against 2,400+ malware signatures
  • Secret Detection: Scanning for exposed API keys, tokens, and credentials
  • Static Analysis: Code-level security analysis for common vulnerability patterns
  • Network Analysis: Detection of suspicious network communications and endpoints
  • Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

Shortfy – Smart URL Shortener is published by [email protected] on the Chrome Web Store marketplace.

Recommendation

This extension is not recommended for installation without thorough manual review. Consider alternatives with lower risk scores, or contact the developer to address the identified security concerns.

Frequently Asked Questions