Is G DATA WebProtection safe?

Clean risk

G DATA WebProtection sends every visited URL to G DATA's cloud threat-intelligence servers to check for malware.

On each browser request, the extension forwards the visited URL to G DATA's cloud servers (dlarray-bp-*-secsrv*.gdatasecurity.de) in batches of up to 128 URLs, including the product version and browser version. When a file is downloaded, the extension also sends the file URL, MD5/SHA1/SHA256 checksums, file size, and a customer identifier (CCID) to G DATA's file cloud servers for malware scanning. If a threat is detected, the blocked URL along with the referrer and User-Agent are additionally reported to G DATA's Malware Information Initiative (MII) endpoint.

G DATA CyberDefense AGv1.14.0Chrome Web Store
0Risk
Who publishes it

G DATA CyberDefense AG - no other listings under this identity

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
G DATA CyberDefense AG
Declared legal entity
G DATA CyberDefense AG
Registered address
Königsallee 178, Bochum 44799, DE

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 1.14.0. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on every secure site you visit

    https://*/*

  • Read and change your data on every site you visit

    http://*/*

  • Watch every request your browser makes

    webRequest

  • Talk to a program installed on your computer, outside the browser's sandbox

    nativeMessaging

  • See the address and title of every tab you have open

    tabs

  • Start, monitor and manage your downloads

    downloads

  • Schedule its own background tasks

    alarms

Where it sends data

Destinations our analysis observed GDWP contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • url-mii-comchan.gdatasoftware.com

    GDWP sends data to url-mii-comchan.gdatasoftware.com. One other extension we have analysed sends data here.

  • dlarray-bp-europ-fileblsrv001.gdatasecurity.de

    GDWP sends data to dlarray-bp-europ-fileblsrv001.gdatasecurity.de. No other extension we have analysed sends data here.

  • dlarray-bp-europ-secsrv001.gdatasecurity.de

    GDWP sends data to dlarray-bp-europ-secsrv001.gdatasecurity.de. No other extension we have analysed sends data here.

  • file-mii-comchan.gdatasoftware.com

    GDWP sends data to file-mii-comchan.gdatasoftware.com. No other extension we have analysed sends data here.

Updated 30 September 2026iokapgenfjiafbmphhhcgmgkobiiomcp