Is CFCA CertEnrollment.Hebgyl Extension safe?

Low risk

CFCA CertEnrollment.Hebgyl Extension lets allowed websites choose a native messaging host and send arbitrary JSON to it.

The extension accepts messages from listed Hebgyl and related domains and opens the native messaging host named by the web page. It then forwards the page-supplied JSON body to that host without an extension-side allowlist for the host name. The reviewed claim identifies storage data as the affected data type, but no fixed recipient domain is evidenced.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

Hebgylv3.2.0.2Chrome Web Store
17Risk
Who publishes it

建投商务网 - no other listings under this identity

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
Hebgyl
Declared legal entity
建投商务网
Registered address
中山路22号凯嘉大厦, 石家庄市, 河北省 050000, CN

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 3.2.0.2. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on jtsww.com

    http://*.jtsww.com/* and 1 more

  • Read and change your data on jtsww.com.cn

    http://*.jtsww.com.cn/* and 1 more

  • Read and change your data on jtsww.cn

    http://*.jtsww.cn/* and 1 more

  • Read and change your data on hebgyl.com

    http://*.hebgyl.com/* and 1 more

  • Read and change your data on hebgyl.cn

    http://*.hebgyl.cn/* and 1 more

  • Read and change your data on hebzy.com

    http://*.hebzy.com/* and 1 more

  • Read and change your data on hebzyc.com

    http://*.hebzyc.com/* and 1 more

  • Talk to a program installed on your computer, outside the browser's sandbox

    nativeMessaging

Updated 30 September 2026migcjphiahailjiopohlamlahbelbncd