Is GestorICP safe?
GestorICP sends site cookies to doc9.com.br and redirects signer scripts and NF-e downloads through vendor servers.
For NF-e document downloads, the extension reads all cookies for the target site and posts them to the vendor's backend, which fetches the document on the user's behalf. It also adds redirect rules that load vendor-hosted versions of government signer scripts and route NF-e download URLs through vendor endpoints. When the backend session data specifies one, it sets a browser-wide proxy for the target site.
Who publishes itGerenciador de Certificados Digitais - 1 other listing from the same operator, none carrying a finding
Gerenciador de Certificados Digitais - 1 other listing from the same operator, none carrying a finding
What this publisher told the store about itself, and the other listings that told it the same thing.
Same store account
1 other listing published from this account, 100k+ users between them, none of them carrying a finding.
Shared hosts - 2 hostnames
Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Where it sends data
Destinations our analysis observed GestorICP contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- cloud.doc9.com.br
GestorICP sends data to cloud.doc9.com.br. No other extension we have analysed sends data here.
- goproxy.doc9.com.br
GestorICP sends data to goproxy.doc9.com.br. No other extension we have analysed sends data here.