Is RollViewer - GordaoDAORA safe?

Medium risk

RollViewer - GordaoDAORA reads your Steam ID on CSGO-Skins pages and sends it to RollViewer's API for subscription checks.

The extension hooks CSGO-Skins page network responses and page state to find a 17-digit Steam ID, then stores it as crv_current_steamid and crv_master_id in Chrome local storage. It requests https://api.rollviewer.com.br/api/assinatura/{steamId} to check the user's RollViewer plan, including from cached storage on later page loads.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

Rafael Mv3.4.0Chrome Web Store
40Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Where it sends data

Destinations our analysis observed RollViewer - GordaoDAORA contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • api.rollviewer.com.br

    RollViewer - GordaoDAORA sends data to api.rollviewer.com.br. No other extension we have analysed sends data here.

Updated 30 September 2026jogmkjgnedeflninlnahcdkglbcbkmlk