Is TrafficLight safe?
TrafficLight sends every visited URL and Facebook ad content to Bitdefender's cloud servers for reputation and malvertising analysis.
On each navigation, the extension transmits the full URL to nimbus.bitdefender.net for cloud-based reputation scanning, using a fixed client ID tied to the extension build. On Facebook, the extension intercepts GraphQL API responses to extract sponsored ad content—including ad IDs, profile names, and links—and forwards these along with a per-device UUID to Bitdefender's malvertising endpoint. Facebook and Messenger chat messages from unknown contacts are additionally forwarded to a locally-installed Bitdefender AV application via native messaging for URL scanning.
Who publishes itBitdefender SRL - 4 other listings from the same operator, none carrying a finding
Bitdefender SRL - 4 other listings from the same operator, none carrying a finding
What this publisher told the store about itself, and the other listings that told it the same thing.
Same store account
2 other listings published from this account, 8.1M+ users between them, none of them carrying a finding.
Same operator - 2 listings
Published under a different store account, but sharing the registered address, contact or declared legal entity this one gave the store.
Shared hosts - 3 hostnames
Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Where it sends data
Destinations our analysis observed TrafficLight contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- nimbus.bitdefender.net
TrafficLight sends data to nimbus.bitdefender.net. 3 other extensions we have analysed send data here.
- com.extension.av.communication (local Bitdefender AV)
TrafficLight sends data to com.extension.av.communication (local Bitdefender AV). Named as a recipient in this extension's own analysis.