Is Bublup safe?

Low risk

Bublup lets web pages request and receive screenshots of the visible browser tab through its content-script messaging bridge.

Bublup injects a content script on all sites with a page-facing message handler that can accept messages without checking the page origin. After the extension is set up, a page can request a visible-tab screenshot, and the extension returns the screenshot as a data URL event in the page.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

Bublup, Inc.v25.0.0Chrome Web Store
15Risk
Who publishes it

Bublup, Inc. - no other listings under this identity, 1 shared hostname

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
Bublup, Inc.
Declared legal entity
Bublup, Inc.
Registered address
175 Chain Bridge Rd, McLean, VA 22101-1907, US
Registered contact
Bublup

Shared hosts - 1 hostname

Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.

g-ecx.images-amazon.com
Also called by 4 other listings, including SoldScope — Advanced Research & Analytics for Amazon Sellers, Jungle Scout, Jungle Scout

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Updated 2 November 2026cbfllaanijkpjgnolhfhephemiccnacj