Is Extensao do Ninja safe?
Extensao do Ninja sends your csgo.net user ID and case-opening drops to its own servers.
On csgo.net, when you open a case or upgrade, the extension posts your numeric csgo.net user ID and roll IDs to livedrop.ludraapi.site and records them in a Firebase project. It also reads skin names and prices from csgo.net listings and sends them to ludraapi.site to display market links.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
Who publishes itluanandradeti10 - 2 other listings from the same operator, 1 of them carrying a finding
luanandradeti10 - 2 other listings from the same operator, 1 of them carrying a finding
What this publisher told the store about itself, and the other listings that told it the same thing.
Same store account
2 other listings published from this account, 1k+ users between them. 1 of them carries a finding.
Shared hosts - 1 hostname
Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Where it sends data
Destinations our analysis observed Extensao do Ninja contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- livedrop.ludraapi.site
Extensao do Ninja sends data to livedrop.ludraapi.site. 2 other extensions we have analysed send data here.
- ludraapi.site
Extensao do Ninja sends data to ludraapi.site. One other extension we have analysed sends data here.
- Firebase project extensao-do-ninja
Extensao do Ninja sends data to Firebase project extensao-do-ninja. Named as a recipient in this extension's own analysis.