Is ClassroomGo - AI無邊際 (老師) safe?

Medium risk

ClassroomGo embeds a hardcoded YOURLS API signature in its bundle, allowing any party with source access to create short URLs on gtogo.to.

ClassroomGo is a teacher-side classroom management extension that integrates with Google Classroom, captures screen and audio, and shortens shared URLs via the gtogo.to YOURLS service. The extension bundles a static API signature ('50c1d8704c') in plaintext across multiple locations in its background script, which any user who inspects the extension source can use to call the gtogo.to URL-shortening API directly. It also embeds hardcoded TURN server credentials for WebRTC screen-sharing sessions, exposing those relay credentials to anyone who reads the source.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

雲動教育科技v9.30.08Chrome Web Store
40Risk
Who publishes it

YunDong Education Solutions Ltd - 2 other listings from the same operator, none carrying a finding

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
雲動教育科技
Declared legal entity
YunDong Education Solutions Ltd
Registered address
敦煌里信義路四段265巷12弄1號, Da'an District, Taipei City 106, TW
Registered contact
Mike Yung

Same store account

1 other listing published from this account, 60k+ users between them, none of them carrying a finding.

Same operator - 1 listing

Published under a different store account, but sharing the registered address, contact or declared legal entity this one gave the store.

Shared hosts - 22 hostnames

Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.

classroommate.org
Also called by 1 other listing
gem.edcademy.ai
Also called by 1 other listing: classi-ai-선생님
goss2.ilc.edu.tw
Also called by 1 other listing: classi-ai-선생님
hd.ydes.ai
Also called by 1 other listing: classi-ai-선생님
ilcsch.ilc.edu.tw
Also called by 1 other listing: classi-ai-선생님
oauth.googleusercontent.com
Also called by 1 other listing
rs.gto.to
Also called by 1 other listing
ydes.ai
Also called by 1 other listing
admin.gto.to
Also called by 2 other listings, including classi-ai-학생
api.fumu.ai
Also called by 2 other listings
capture-pro.everhelper.me
Also called by 2 other listings, including Nimbus Screen Capture: Screenshot, Edit, Annotate
classi.school
Also called by 2 other listings, including classi-ai-학생
classroommate.gtrainers.org
Also called by 2 other listings, including classi-ai-학생
goms.gto.to
Also called by 2 other listings
gto.to
Also called by 2 other listings
iwb.fumu.ai
Also called by 2 other listings, including classi-ai-학생
pubnub.a.ssl.fastly.net
Also called by 2 other listings
rs.fumu.ai
Also called by 2 other listings
rsgoms.gto.to
Also called by 2 other listings
socket.gto.to
Also called by 2 other listings
sync.everhelper.me
Also called by 5 other listings, including Nimbus Screen Capture: Screenshot, Edit, Annotate, Web Clipper (Nimbus), Live Start Page - Speed Dial
nimb.ws
Also called by 6 other listings, including Nimbus Screen Capture: Screenshot, Edit, Annotate, FuseBase Assistant - AI Chat and Agents

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Where it sends data

Destinations our analysis observed ClassroomGo - AI無邊際 (老師) contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • 54.169.183.120

    ClassroomGo - AI無邊際 (老師) sends data to 54.169.183.120. No other extension we have analyzed sends data here.

  • gtogo.to

    ClassroomGo - AI無邊際 (老師) sends data to gtogo.to. No other extension we have analyzed sends data here.

Updated 30 September 2026fokkbgoglgfjicalddihnfdfolnhoebb