Is クリックポスト拡張機能 by GoQSystem（クリックポストまとめ決済＆取込） safe?
クリックポスト拡張機能 sends Amazon OAuth token requests with a packaged client secret.
When users connect Amazon, the extension includes a hardcoded Amazon OAuth client secret in the token exchange sent to api.amazon.com. Its label download flow also sends a sequence ID, timestamp, and label count to an AWS Lambda endpoint.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
Who publishes it株式会社GoQSystem - no other listings under this identity
株式会社GoQSystem - no other listings under this identity
What this publisher told the store about itself, and the other listings that told it the same thing.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Where it sends data
Destinations our analysis observed クリックポスト拡張機能 by GoQSystem（クリックポストまとめ決済＆取込） contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- api.amazon.com
クリックポスト拡張機能 by GoQSystem（クリックポストまとめ決済＆取込） sends data to api.amazon.com. No other extension we have analysed sends data here.
- qpyxedrihs7ltdsujs6gctjbam0dmfnt.lambda-url.ap-northeast-1.on.aws
クリックポスト拡張機能 by GoQSystem（クリックポストまとめ決済＆取込） sends data to qpyxedrihs7ltdsujs6gctjbam0dmfnt.lambda-url.ap-northeast-1.on.aws. No other extension we have analysed sends data here.