Is Netflix Skipper: skip intros, recaps & more [QVI] safe?
Netflix Skipper collects Netflix account details, viewing history, and profile data and transmits them to remote servers on a 30-minute cycle.
The extension runs a server-directed scraping pipeline that queries Netflix internal APIs for profiles, viewing history, device lists, and watchlists, then uploads the results to me3x.online. Separately, it reads account owner PII — including name, email addresses, country, and account GUIDs — from Netflix's page state and sends them to metricsmint.quest. Both pipelines run in the background and repeat every 30 minutes regardless of user interaction.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Findings
Netflix helper sends install ID and error context to me3x.online on page load
Though scoped to Netflix, the background worker loads a bundled logger (typ.min.js) reporting to me3x.online.
A Netflix visit produced a POST to me3x.online/n/js/dlog with the runtime ID, a per-install UUID, version, and error text.
You open a Netflix page with the extension installed.
The extension's content script and background service worker are scoped to netflix.com and the other Netflix country domains listed in the manifest.
The background service worker loads a bundled logging component that reports back to me3x.online.
On the page's error path the component sends a POST to https://me3x.online/n/js/dlog containing the extension runtime ID, a per-install UUID, the version, and the error message.
| Content-Type | application/json |
{
"dist": "hkkonihelbmcdiikfebpdoiihdgpclik",
"revision": "ead0d9e8",
"platform": "netflix",
"namespace": "getRequest response error",
"extVer": "1.2.12",
"extensionUserId": "fed67abc-6447-4f1d-8f00-4b897dab134f",
"dhVer": "<build>",
"message": "<error stack>"
}| Field | Value | Why it matters | |
|---|---|---|---|
Extension install ID | hkkonihelbmcdiikfebpdoiihdgpclik | The extension's runtime ID, which is stable for a given installation and lets the server tie reports to a specific install. | |
Per-install user ID | fed67abc-6447-4f1d-8f00-4b897dab134f | A UUID the extension generates once and keeps in storage; it persists across sessions and links every report from the same installation. | |
Platform | netflix | Which site context produced the report. Here it is fixed to Netflix. | |
Extension version | 1.2.12 | The installed version of the extension. | |
Namespace / error message | getRequest response error | A label and the text of the internal error or exception that triggered the report. | |
Build revision | ead0d9e8 | A fixed build identifier baked into the extension's logging config. |
The bundled logger and its me3x.online destination
logData = {
dist: getDist(), // chrome.runtime.id
revision: revision, // 'ead0d9e8'
platform: platform, // 'netflix'
namespace: namespace, // e.g. 'getRequest response error'
extVer: getExtensionVersion(), // '1.2.12'
extensionUserId: extensionUserId,// per-install UUID from chrome.storage
dhVer: package_namespaceObject.rE,
message: `${message}` // error / stack text
};
await httpNodeLog(logData); // POST https://me3x.online/n/js/dlog- me3x.online
Receives logging POSTs at /n/js/dlog: runtime ID, per-install UUID, version and error context. Not Netflix, and not a named first-party analytics service in the listing.