Is Email Finder safe?

Question

Accepted Answer

Email Finder is high risk. The extension runs a content script on every website you open — including banking, healthcare, and private intranet pages — and automatically extracts every email address it finds from the page source. Dynamic analysis confirmed extraction firing on seven distinct sites (facebook.com, google.com, amazon.com, cchpbc.ca, contact.io, whois.com, linkedin.com) during a single browsing session. The scraped addresses are stored locally and, when auto-save is enabled, transmitted to email-extractor.io. On first install the extension generates a random 64-character token and stores it in chrome.storage. That token is prepended to every outbound request to email-extractor.io — including every batch of emails the extension collects. Because the token never rotates, the developer's server can correlate all data submitted from your browser across weeks or months, even across different Google accounts or browsing profiles. Dynamic analysis confirmed the same token appeared in chrome.storage.local and in an outbound Google Analytics event during two separate test runs.

Is Email Finder safe?

Findings