Is GLB GE extension safe?
GLB GE extension sends page HTML, screenshots and your IP to its servers on car-auction sites.
On Copart, IAA, Manheim and EdgePipeline pages, the extension sends the full page HTML, a JPEG screenshot, your public IP, VIN/lot and URL to admin.glb.ge. It also sends click text and mouse-move coordinates to extension.goodsoft.space. It can route traffic for those auction sites through a vendor proxy and answer proxy authentication prompts with built-in credentials.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
Who publishes it3 other listings from the same operator, none carrying a finding
3 other listings from the same operator, none carrying a finding
What this publisher told the store about itself, and the other listings that told it the same thing.
Same store account
3 other listings published from this account, 1k+ users between them, none of them carrying a finding.
Shared hosts - 2 hostnames
Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Where it sends data
Destinations our analysis observed GLB GE extension contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- api.ipify.orgwidely used
GLB GE extension sends data to api.ipify.org. A widely used service: 58 other extensions we have analysed send data here.
- extension.goodsoft.space
GLB GE extension sends data to extension.goodsoft.space. One other extension we have analysed sends data here.
- 48.45.147.25:46768
GLB GE extension sends data to 48.45.147.25:46768. No other extension we have analysed sends data here.
- admin.glb.ge
GLB GE extension sends data to admin.glb.ge. No other extension we have analysed sends data here.