Is Goodkey safe?

Medium risk

Goodkey sends text from active webpages to mcc.r-broker.ru while its page indexing feature is active.

When Goodkey's indexing feature is active, its content script can run on all sites, read the active page's body text, and pass that text through the background script for lemmatization. The extension posts the resulting keyword data to mcc.r-broker.ru, and its bundled GPT helper posts user-supplied chat messages and model data to lk2.in-fo.ru using a hardcoded bearer token.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

www.r-broker.ruv1.1.311Chrome Web Store
43Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 1.1.311. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on every site you visit

    <all_urls>

  • Read and change your data on www.googleapis.com

    https://www.googleapis.com/*

  • Read and change your data on mcc.r-broker.ru:3000

    http://mcc.r-broker.ru:3000/

  • Read and change your data on mcc-r1.in-fo.ru

    http://mcc-r1.in-fo.ru/wordstatApi/getData and 6 more

  • Read and change your data on selenium.in-fo.ru

    https://selenium.in-fo.ru/wordstatApi/getData and 5 more

  • Read and change your data on mcc.r-broker.ru

    https://mcc.r-broker.ru/instruments/gkRedactor/checkPluginUrl and 2 more

  • Read and change your data on future.r-broker.ru

    http://future.r-broker.ru/instruments/gkRedactor/checkPluginUrl and 2 more

  • Read and change your data on goodkey.online

    https://goodkey.online/instruments/gkRedactor/checkPluginUrl and 2 more

  • Write to your clipboard

    clipboardWrite

  • Add items to the right-click menu

    contextMenus

  • See the address and title of every tab you have open

    tabs

  • Store data in your browser

    storage

  • Run its own code inside the pages you visit

    scripting

  • Act on the current tab, but only after you click the extension

    activeTab

  • Sign you in with your Google account

    identity

Where it sends data

Destinations our analysis observed Goodkey contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • lk2.in-fo.ru

    Goodkey sends data to lk2.in-fo.ru. No other extension we have analysed sends data here.

  • mcc.r-broker.ru

    Goodkey sends data to mcc.r-broker.ru. No other extension we have analysed sends data here.

Updated 30 September 2026onjgfafffgiioldchkacbbdhlodlolej