Is Email Generator safe?

Medium risk

Email Generator renders remote email HTML from emailgenerator.24maxkazakov.ru inside an unsandboxed popup iframe.

When checking the inbox, Email Generator requests new messages from emailgenerator.24maxkazakov.ru using the stored token and saves each message body as HTML. The popup then places that remote HTML directly into an iframe srcdoc without sandboxing or sanitizing it.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

40Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 1.5. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on emailgenerator.24maxkazakov.ru

    https://emailgenerator.24maxkazakov.ru/*

  • Store data in your browser

    storage

Where it sends data

Destinations our analysis observed Email Generator contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • emailgenerator.24maxkazakov.ru

    Email Generator sends data to emailgenerator.24maxkazakov.ru. No other extension we have analysed sends data here.

Updated 30 September 2026nopbpkakbijkbhfcofpmfkdkdgbcjpec