Is CG Entry Master - ChatGPT入口特殊工具 safe?

Low risk

CG Entry Master sends the user's email, access token, and IP address to its server in cleartext HTTP, embedded in the request URL.

This extension installs a proxy configuration to route browsing traffic through the vendor's network. To authenticate and select a proxy node, it reads the user's email from a cookie on the vendor's own site, then requests an access token and connects to a proxy node by calling the vendor's API at api.lm.234268.xyz -- but over plain http:// rather than https://, with the email, access token, client ID, and client IP placed directly in the URL path. Anyone able to observe network traffic along the path, such as a network operator or intermediate proxy, can read these values in plaintext.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

letsmainv1.0.1Chrome Web Store
15Risk
Who publishes it

letsmain - 8 other listings from the same operator, 1 of them carrying a finding

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Where it sends data

Destinations our analysis observed CG Entry Master - ChatGPT入口特殊工具 contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • api.lm.234268.xyz

    CG Entry Master - ChatGPT入口特殊工具 sends data to api.lm.234268.xyz. 3 other extensions we have analyzed send data here.

Updated 30 September 2026obpbfnjaokmmobnhoodhlndhopmnhbfi