Is Google Analytics UTM Builder safe?
Google Analytics UTM Builder ships its developer's confidential Bitly OAuth client secret hardcoded in the extension bundle.
The extension builds and manages UTM-tagged campaign URLs, with optional shared workspaces synced through its backend at utm-builder.trafikant.pro. When you connect Bitly to shorten links, the extension exchanges the OAuth code using a confidential client_secret that is embedded in plain text in background.bundle.js, so any user can extract it. Link shortening goes through Bitly, and the extension also loads Google Analytics and Sentry error reporting.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
Who publishes itAssaf Trafikant - 3 other listings from the same operator, none carrying a finding
Assaf Trafikant - 3 other listings from the same operator, none carrying a finding
What this publisher told the store about itself, and the other listings that told it the same thing.
Same store account
3 other listings published from this account, 71k+ users between them, none of them carrying a finding.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
What it can do
Permissions this extension asks for, as declared in version 10.2.1. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Read and change your data on utm-builder.trafikant.pro
*://utm-builder.trafikant.pro/*
Read and change your data on bitly.com
*://bitly.com/*
Read and change your data on api-ssl.bitly.com
*://api-ssl.bitly.com/*
Act on the current tab, but only after you click the extension
activeTab
Store data in your browser
storage
Sign you in with your Google account
identity
Where it sends data
Destinations our analysis observed Google Analytics UTM Builder contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- www.google-analytics.comwidely used
Google Analytics UTM Builder sends data to www.google-analytics.com. A widely used service: 388 other extensions we have analyzed send data here.
- api-ssl.bitly.com
Google Analytics UTM Builder sends data to api-ssl.bitly.com. 6 other extensions we have analyzed send data here.
- o552627.ingest.sentry.io
Google Analytics UTM Builder sends data to o552627.ingest.sentry.io. No other extension we have analyzed sends data here.
- utm-builder.trafikant.pro
Google Analytics UTM Builder sends data to utm-builder.trafikant.pro. No other extension we have analyzed sends data here.