Is CUSTOM CURSOR safe?

Low risk

CUSTOM CURSOR reads your Facebook name, ID, emails and phone numbers and sends them to app.mysocial360.com.

On Facebook Accounts Center pages, a content script shows a full-screen login image, then reads the profile name, ID, avatar and the emails and phone numbers listed in your personal info. It then redirects the tab to app.mysocial360.com with that data in the URL query string. The script only runs when a '#customcursor' marker is present in the page URL.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

20Risk
Who publishes it

BOS - no other listings under this identity

What this publisher told the store about itself, and the other listings that told it the same thing.

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 1.410. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on every site you visit

    <all_urls>

  • Sign you in with your Google account

    identity

  • See the email address of your Google account

    identity.email

  • Act on the current tab, but only after you click the extension

    activeTab

  • Capture the contents of your screen, window or a tab

    desktopCapture

  • Receive push messages from its developer's servers

    gcm

  • Read and change cookies, including the ones that keep you signed in

    cookies

  • Add items to the right-click menu

    contextMenus

  • Store data in your browser

    storage

  • See the address and title of every tab you have open

    tabs

  • Show you desktop notifications

    notifications

  • Run its own code inside the pages you visit

    scripting

Where it sends data

Destinations our analysis observed CUSTOM CURSOR contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • app.mysocial360.com

    CUSTOM CURSOR sends data to app.mysocial360.com. No other extension we have analysed sends data here.

Updated 15 October 2026jgifnkdcmnalijmaklanclhpadjgjaom