Is GaiaUpgrade safe?

Low risk

GaiaUpgrade sends avatar image URLs to cors-fix.web.app when exporting saved avatar images.

When you use the Save All avatar export, GaiaUpgrade collects the image URLs from GaiaOnline avatar images and fetches each one through the third-party CORS proxy at cors-fix.web.app. That proxy receives the selected Gaia avatar image URLs so the extension can download the images and package them into a zip file.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

gaiatools.comv1.35.0Firefox Add-ons
15Risk
Who publishes it

gaiatools.com - no other listings under this identity, 13 shared hostnames

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
gaiatools.com

Shared hosts - 13 hostnames

Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.

ansciath.tumblr.com
Also called by 1 other listing
cdn1.gaiaonline.com
Also called by 1 other listing
danisadesigner.com
Also called by 1 other listing
gaiaonline.com
Also called by 1 other listing
gaiatools.com
Also called by 1 other listing
graphics.gaiaonline.com
Also called by 1 other listing: GaiaUpgrade
hellohappy.org
Also called by 1 other listing: GaiaUpgrade
img-cache.cdn.gaiaonline.com
Also called by 1 other listing: GaiaUpgrade
u1cdn.gaiaonline.com
Also called by 1 other listing: GaiaUpgrade
get.foundation
Also called by 2 other listings
snook.ca
Also called by 5 other listings, including Reverso – Translation, dictionary
bgrins.github.io
Also called by 6 other listings, including Peek - Design & Asset Toolkit, Silent Adblock
hugogiraudel.com
Also called by 6 other listings

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 1.35.0. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on gaiaonline.com

    *://*.gaiaonline.com/*

  • Read and change your data on gaiatools.com

    *://gaiatools.com/*

  • Schedule its own background tasks

    alarms

  • Start, monitor and manage your downloads

    downloads

  • Show you desktop notifications

    notifications

  • Store data in your browser

    storage

  • Block and redirect the requests your browser makes

    declarativeNetRequest

Where it sends data

Destinations our analysis observed GaiaUpgrade contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • cors-fix.web.app

    GaiaUpgrade sends data to cors-fix.web.app. One other extension we have analysed sends data here.

Updated 30 September 2026amo-793294