Is CG Entry Master - ChatGPT入口特殊工具 safe?
CG Entry Master sends the user's email, access token, and IP address to its server in cleartext HTTP, embedded in the request URL.
This extension installs a proxy configuration to route browsing traffic through the vendor's network. To authenticate and select a proxy node, it reads the user's email from a cookie on the vendor's own site, then requests an access token and connects to a proxy node by calling the vendor's API at api.lm.234268.xyz -- but over plain http:// rather than https://, with the email, access token, client ID, and client IP placed directly in the URL path. Anyone able to observe network traffic along the path, such as a network operator or intermediate proxy, can read these values in plaintext.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
Who publishes itletsmain - 8 other listings from the same operator, 1 of them carrying a finding
letsmain - 8 other listings from the same operator, 1 of them carrying a finding
What this publisher told the store about itself, and the other listings that told it the same thing.
Same store account
8 other listings published from this account, 720 users between them. 1 of them carries a finding.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Where it sends data
Destinations our analysis observed CG Entry Master - ChatGPT入口特殊工具 contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- api.lm.234268.xyz
CG Entry Master - ChatGPT入口特殊工具 sends data to api.lm.234268.xyz. 3 other extensions we have analyzed send data here.