Is Findymail - Email & Phone Finder safe?

Findymail checks postMessage sender origin with a substring match, then writes the message data into the LinkedIn page via innerHTML.

On LinkedIn Sales Navigator, search, and posts pages, Findymail listens for window postMessage events and checks the sender's origin with a substring test rather than an exact match, so an origin merely containing the expected auth domain passes. Messages that pass are stored and later inserted into Findymail's contact widget on the live linkedin.com page using innerHTML without sanitization, so a page able to satisfy that origin check can inject content into the widget.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.