Is Scalelist - Email & Phone Finder safe?

Clean risk

Scalelist reads your LinkedIn session cookies and captured request headers and sends them to its own servers to act on your account.

On LinkedIn pages the extension reads the user's LinkedIn authentication cookies (li_a, li_at, JSESSIONID) and captures the full set of outgoing request headers, then POSTs them together to app.scalelist.com so the vendor backend can replay the logged-in session server-side. A page-context script also intercepts Sales Navigator people/lead search requests and forwards their contents back to the extension. All of this is scoped to LinkedIn.

Scalelistv0.0.3Chrome Web Store
0Risk
Who publishes it

Scalelist - no other listings under this identity

What this publisher told the store about itself, and the other listings that told it the same thing.

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Where it sends data

Destinations our analysis observed Scalelist - Email & Phone Finder contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • app.scalelist.com

    Scalelist - Email & Phone Finder sends data to app.scalelist.com. No other extension we have analyzed sends data here.

Updated 22 October 2026anaccdhbkiogfkgiajemghahklnkofmc