Is Webmiru safe?
Webmiru sends the domain, detected technologies and found emails of each viewed site to a publisher-run Google Apps Script.
When the popup opens, the extension looks up the active tab's domain on hunter.io, which receives the hostname, to find email addresses. It then posts the domain, detected technologies, harvested emails and page language to a Google Apps Script endpoint run by the publisher, whether or not the email lookup succeeds. A hunter.io API key is embedded in the extension's code.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Where it sends data
Destinations our analysis observed Webmiru contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- script.google.com
Webmiru sends data to script.google.com. 14 other extensions we have analysed send data here.
- api.hunter.io
Webmiru sends data to api.hunter.io. No other extension we have analysed sends data here.