GFC Invoice is low risk. The rating reflects signals from our analysis that have not yet been published as detailed findings.

Who makes GFC Invoice?

GFC Invoice is published by MEDIA 019. The same operator publishes 4 other store listings, 4 of which carry a security finding.

What servers does GFC Invoice send data to?

Our analysis observed GFC Invoice sending data to alitems.link.

Is GFC Invoice safe?

Low risk

GFC Invoice intercepts clicks on 17 shopping sites and reroutes the purchase through its own affiliate link before it loads.

On sites like AliExpress, Alibaba, Banggood, DHgate and others, the extension watches every product and category link and, once per site per 24 hours, blocks the normal click and silently opens the same destination in a hidden background tab tagged with its own affiliate code. The visible tab the user is looking at never navigates, so the substitution is not apparent to them, but the site sees the visit as coming through the extension's affiliate link.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

Dropshipping Storev0.0.3.1Chrome Web Store

20Risk

Who publishes it

MEDIA 019 - 4 other listings from the same operator, 4 of them carrying a finding

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher

Dropshipping Store

Declared legal entity

MEDIA 019

Website

www.dropshipping.store/gfc-invoice-instructions/

Same store account

4 other listings published from this account, 39k+ users between them. 4 of them carry a finding.

Ali Invoice FREE20k+Medium Ali Invoice10k+Medium Search AliExpress by Image and Find Similar Products7k+Medium Dark Mode for AliExpress & Alibaba2k+Medium

Shared hosts - 5 hostnames

Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.

dresslily.com

Also called by 1 other listing: Friendly Tab - New Tab Page

tvc-mall.com

Also called by 1 other listing: DSM Auto-Paste

alitems.link

Also called by 2 other listings, including Ali Insider- AliExpress Product Research Tool

tomtop.com

Also called by 3 other listings, including Importify - AI Dropshipping Product Importer

lightinthebox.com

Also called by 5 other listings, including DSM Auto-Paste, SuperDS - eBay Lister & Dropshipping Tool, DSMATEPRO

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 0.0.3.1. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

Read and change your data on aliexpress.com
*://*.aliexpress.com/*
Read and change your data on aliexpress.ru
*://*.aliexpress.ru/*
Read and change your data on aliexpress.us
*://*.aliexpress.us/*
Read and change your data on alibaba.com
*://*.alibaba.com/*
Read and change your data on banggood.com
*://*.banggood.com/*
Read and change your data on berrylook.com
*://*.berrylook.com/*
Read and change your data on boutiquefeel.com
*://*.boutiquefeel.com/*
Read and change your data on cafago.com
*://*.cafago.com/*
Read and change your data on chicme.com
*://*.chicme.com/*
Read and change your data on cesdeals.com
*://*.cesdeals.com/*
Read and change your data on dhgate.com
*://*.dhgate.com/*
Read and change your data on dresslily.com
*://*.dresslily.com/*
Read and change your data on dx.com
*://*.dx.com/*
Read and change your data on fairyseason.com
*://*.fairyseason.com/*
Read and change your data on floryday.com
*://*.floryday.com/*
Read and change your data on gearbest.com
*://*.gearbest.com/*
Read and change your data on geekbuying.com
*://*.geekbuying.com/*
Read and change your data on ivrose.com
*://*.ivrose.com/*
Read and change your data on joybuy.com
*://*.joybuy.com/*
Read and change your data on joybuy.es
*://*.joybuy.es/*
Read and change your data on jd.ru
*://*.jd.ru/*
Read and change your data on joyshoetique.com
*://*.joyshoetique.com/*
Read and change your data on lightake.com
*://*.lightake.com/*
Read and change your data on lightinthebox.com
*://*.lightinthebox.com/*
Read and change your data on lovelywholesale.com
*://*.lovelywholesale.com/*
Read and change your data on milanoo.com
*://*.milanoo.com/*
Read and change your data on miniinthebox.com
*://*.miniinthebox.com/*
Read and change your data on newchic.com
*://*.newchic.com/*
Read and change your data on priceelf.com
*://*.priceelf.com/*
Read and change your data on rosegal.com
*://*.rosegal.com/*
Read and change your data on romwe.com
*://*.romwe.com/*
Read and change your data on shein.com
*://*.shein.com/*
Read and change your data on zaful.com
*://*.zaful.com/*
Read and change your data on tomtop.com
*://*.tomtop.com/*
Read and change your data on tvc-mall.com
*://*.tvc-mall.com/*
Read and change your data on tvcmall.com
*://*.tvcmall.com/*
Store data in your browser
storage
Watch every request your browser makes
webRequest

Where it sends data

Destinations our analysis observed GFC Invoice contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

alitems.link
GFC Invoice sends data to alitems.link. 4 other extensions we have analysed send data here.