Is Автоотклики на вакансии safe?

Medium risk

Автоотклики на HH — HeadHunter sends saved Telegram usernames to a TributeManager access-check API.

When a user opens the extension UI and saves a Telegram username, the background script calls the vendor's access-check endpoint with that username. The same request includes a bundled X-API-Key for the extension backend; the claim notes this is not a user's HeadHunter or Telegram password.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

kaicexv2.4.5Chrome Web Store
40Risk
Who publishes it

kaicex - 1 other listing from the same operator, none carrying a finding

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
kaicex

Same store account

1 other listing published from this account, 2k+ users between them, none of them carrying a finding.

Shared hosts - 1 hostname

Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.

coreapi.in
Also called by 3 other listings, including Post Translator for TWITTER X.COM

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Where it sends data

Destinations our analysis observed Автоотклики на вакансии contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • tribute-11744d055796.herokuapp.com

    Автоотклики на вакансии sends data to tribute-11744d055796.herokuapp.com. No other extension we have analysed sends data here.

Updated 30 September 2026alfflpildkcnmfflcaikocbinikiecni