Is Video Quality Enhancer • AI 4K Upscale, Sharpen, Light, Gamma & Color Fix safe?
We analyzed Video Quality Enhancer • AI 4K Upscale, Sharpen, Light, Gamma & Color Fix version 4.6.6's actual code and gave it a 78/100 trust score. This…
Bottom line
This appears to be a legitimate video-enhancement extension, but its broad website access and persistent installation tracking warrant caution.
What it can access
It can inspect most websites and change video display, which fits its purpose but is broad access; it also stores settings and installation state. [Q1][Q2][Q4][Q13]
Security weaknesses
No meaningful security weakness is established: remote replies do not run code, sensitive browser settings are not changed, and the website bridge limits allowed senders and actions. [Q7][Q9][Q16][Q21]
Signs of misuse
No clear abuse is shown, though the extension uses a persistent installation ID and sends subscription data, including first-party cookies, for service checks. [Q6][Q13][Q14]
Code findings
What access does this extension ask for, and does that access make sense for what it claims to do?
It runs on most webpages with storage and scripting access, while explicitly excluding major login and payment sites.
Declares all-URL content scripts and host access, plus extensive excluded origins. — manifest.json:11-112
Which websites can it run on, and can it read or change what appears on those pages?
It searches the page for video elements and related frames but does not generally extract page text or form contents.
Finds videos and video-like frames to apply the extension's effects. — main-controller.js:708-840
Searches iframe and shadow DOM content for video elements. — micro-receiver.js:118-179
Can it see sensitive information you type, such as passwords, payment details, messages, or form entries?
No evidence of this behavior was found in the reviewed package.
DOM inspection is limited to identifying videos and video frames. — main-controller.js:708-840
Can it access private browser data such as cookies, signed-in sessions, browsing history, bookmarks, or downloads?
It stores visual presets, site lists, subscription/trial state, preferences, and a persistent installation ID.
Initializes installation, subscription, trial, and default-setting records. — background.js:41-69,234-315
Stores and restores presets and per-site lists. — main-controller.js:2770-2809,3541-3589
Can it access anything else on your device, such as files, location, camera, microphone, clipboard, or installed applications?
Optional smart dimming samples active video frames locally at 32×32 pixels to calculate brightness; no pixel upload was found.
Draws the video to a small canvas, calculates average luma, and keeps the result in local frame messaging. — micro-receiver.js:430-521
Does it send information outside your browser? If so, what information is sent, where does it go, and why?
Network calls are limited to subscription status on the vendor service and country lookup through ipinfo for pricing.
Calls the first-party subscription endpoint and, on an allowlisted pricing request, ipinfo for a country code. — background.js:77-112,317-376
Does it download or run code, settings, or instructions supplied by a remote server?
No evidence of this behavior was found in the reviewed package.
Remote responses affect subscription or pricing state only. — background.js:77-112,317-376
Can it take actions without a clear user request, such as opening pages, redirecting searches, downloading files, or sending requests?
It automatically detects videos and applies the user's stored filter settings on allowed sites, as required by its advertised feature.
Watches for videos and applies stored adjustments when enabled. — micro-receiver.js:153-179,420-425
Can it change important browser settings, including your proxy, search engine, homepage, privacy settings, or other extensions?
No evidence of this behavior was found in the reviewed package.
Requests no browser-settings, proxy, or privacy permissions. — manifest.json:103-112
Is any important behavior difficult to inspect because the code is hidden, heavily obfuscated, dynamically generated, or supplied by third parties?
No evidence of this behavior was found in the reviewed package.
Uses descriptive functions and comments for subscription, GPU, and message handling. — background.js:1-377
Does it use eval(), new Function(), or string-based timers to turn text into executable code?
No evidence of this behavior was found in the reviewed package.
Uses packaged event handlers and fixed network endpoints. — background.js:1-377
Uses packaged DOM and filter logic without dynamic JavaScript execution. — main-controller.js:1-3735
Does it track the websites, pages, searches, or links you visit?
No evidence of this behavior was found in the reviewed package.
Injects packaged scripts into already open HTTP and HTTPS tabs. — background.js:11-39
Derives the current hostname for local exclusion/inclusion settings. — main-controller.js:14-22,2780-2809
Does it create a persistent ID or browser fingerprint to recognize you?
It creates a persistent random installation ID and exposes it, install time, and prior-subscription status to its vendor websites for anti-abuse and reinstall recovery.
Creates and stores the random userId and install/subscription state. — background.js:41-69
Copies those values to or restores them from localStorage on the two vendor domains. — main-controller.js:100-124
Does it send cookies, session details, authentication data, or page contents elsewhere?
A subscription check includes cookies for videoqualityenhancer.app, the intended service; no credential access or unintended recipient was demonstrated.
Fetches the fixed first-party subscription endpoint with credentials included. — background.js:77-112
Does it record typing, form entries, clipboard contents, or screenshots?
No evidence of this behavior was found in the reviewed package.
Requests no input-capture or media-capture permissions. — manifest.json:103-112
Video sampling computes local brightness only. — micro-receiver.js:487-521
Can a website or remote server send commands that make the extension take actions?
No evidence of this behavior was found in the reviewed package.
Checks sender origin and implements only get/set pricing-bracket and country actions. — background.js:317-376
Does it alter links, referral codes, advertisements, shopping carts, or search results?
No evidence of this behavior was found in the reviewed package.
Creates packaged visual filters and sidebar UI. — main-controller.js:1015-1125,1720-1792
Marks images for optional enhancement. — main-controller.js:2971-2979
Does it redirect or modify web traffic, request headers, downloads, or proxy settings?
No evidence of this behavior was found in the reviewed package.
Requests no webRequest, declarativeNetRequest, downloads, or proxy permission. — manifest.json:103-112
Can it communicate with software on the computer or services running on localhost?
No evidence of this behavior was found in the reviewed package.
Requests no nativeMessaging permission. — manifest.json:103-112
Does it decode, decrypt, or unpack hidden data and then execute or inject it?
No evidence of this behavior was found in the reviewed package.
Maps a fixed subscription response into local active, expired, or logged-out status. — background.js:77-112
Can ordinary websites access privileged extension features through messaging or exposed files?
Its vendor website can request or set pricing data through an external bridge, but the handler checks the exact sender origin and accepts only bounded actions.
Rejects non-allowlisted origins and handles only pricing bracket and country requests. — background.js:317-376
Does suspicious behavior activate only for certain users, websites, dates, or remote settings?
No evidence of this behavior was found in the reviewed package.
Implements fixed sensitive-site exclusions and user-controlled per-site lists. — main-controller.js:42-70,2780-2809,2953-2969
Does it perform hidden resource-intensive work, such as cryptocurrency mining?
No evidence of this behavior was found in the reviewed package.
Checks the local GPU renderer for compatibility. — offscreen.js:10-61
Uses a small local canvas for smart dimming. — micro-receiver.js:430-521
Does it change form fields or where a form sends its information?
No evidence of this behavior was found in the reviewed package.
Input handlers are scoped to the extension's own vqShadowRoot controls. — main-controller.js:2135-2195,3177-3296