--- title: "Is NetHunt CRM for Gmail safe on LinkedIn in 2026?" description: "Does LinkedIn detect NetHunt CRM for Gmail? It's on LinkedIn's active detection list. Checked against LinkedIn's own 4,934-extension list — see the verdic…" url: https://safe-outreach.com/is-nethunt-crm-safe date_published: 2026-11-03T08:01:45.550Z date_modified: 2026-11-06T00:00:00.000Z publisher: Safe Outreach --- # Is NetHunt CRM for Gmail safe on LinkedIn in 2026? **No — LinkedIn detects NetHunt CRM for Gmail** (we checked it November 6, 2026). NetHunt CRM for Gmail's extension ID is on LinkedIn's AED detection list (Nov 2026 snapshot), and LinkedIn's page code checks for NetHunt CRM for Gmail on every visit by requesting chrome-extension://kaeigipjcamcanmmhgpniimjagdleoee/pixel.gif — a file that exists only if NetHunt CRM for Gmail is installed. Our automated scan of NetHunt CRM for Gmail 26.299.653 found code that references LinkedIn's session cookie li\_at (1 matches in 1 files); whether NetHunt CRM for Gmail sends that cookie anywhere needs a manual dataflow review. Updated November 6, 2026 · LinkedIn AED snapshot Nov 2026 ID: kaeigipjcamcanmmhgpniimjagdleoee ## Does LinkedIn detect NetHunt CRM for Gmail? What we found in its code Detected by LinkedIn This browser extension is actively compiled into LinkedIn's frontend detection lists. LinkedIn's scripts can detect when this is active on your browser. LinkedIn requests: **chrome-extension://kaeigipjcamcanmmhgpniimjagdleoee/pixel.gif** DETECTED **What this means:** detection isn't an instant ban — it's one input to LinkedIn's risk _score_. But it's a standing signal: it stacks with your behavior (volume, programmatic clicks) and device fingerprint, and this is just the AED list — one of LinkedIn's three detection systems ([see how it works](https://browsergate.eu/how-it-works/)). ### What our automated scan found in NetHunt CRM for Gmail's code We downloaded NetHunt CRM for Gmail version 26.299.653 from the Chrome Web Store on November 2, 2026 and searched its 11 code files for the patterns below. Each line shows the first place we found it. - NetHunt CRM for Gmail's code references `li_at` — LinkedIn's session cookie, the one that keeps you logged in. 1 match in 1 file — first at background.js:1. - NetHunt CRM for Gmail's code references `JSESSIONID` — LinkedIn's CSRF cookie, needed to call LinkedIn's internal API as you. 2 matches in 1 file — first at background.js:1. - NetHunt CRM for Gmail uses the Chrome cookies API (`chrome.cookies`), which reads cookies of every site it has access to. 1 match in 1 file — first at background.js:1. - NetHunt CRM for Gmail reads or writes `document.cookie` inside pages. 2 matches in 1 file — first at package.js:2. - NetHunt CRM for Gmail creates synthetic clicks or keystrokes (`dispatchEvent` / `MouseEvent`) — LinkedIn can tell these from real input (`isTrusted=false`). 32 matches in 6 files — first at gcAjax.js:1. - NetHunt CRM for Gmail runs code built at runtime (`eval` / `new Function`). 1 match in 1 file — first at package.js:2. - NetHunt CRM for Gmail makes its own network requests (`fetch` / XHR / WebSocket). 14 matches in 4 files — first at background.js:1. - NetHunt CRM for Gmail's code mentions linkedin.com. 18 matches in 2 files — first at background.js:1. Permissions NetHunt CRM for Gmail asks for storage scripting declarativeNetRequestWithHostAccess https://\*.nethunt.com/\* https://\*.nethunt.co/\* https://\*.googleusercontent.com/proxy/\* https://mail.google.com/mail/\* https://calendar.google.com/calendar/\* **What this scan is — and isn't.** It is an automated static search of the shipped package, not a full teardown: a match means the pattern is in the code, not that NetHunt CRM for Gmail misuses it, and no match doesn't prove absence (minified or runtime-built code can hide it). We haven't traced where NetHunt CRM for Gmail sends data. [How we test](https://safe-outreach.com/how-we-test) ### How LinkedIn checks for NetHunt CRM for Gmail: the AED probe That verdict isn't a guess. This is what LinkedIn's own page code does on every visit — simplified from its production bundle, which the [BrowserGate investigation](https://browsergate.eu/how-it-works/) reverse-engineered line by line: // LinkedIn's page bundle — simplified from BrowserGate's teardown const hits = \[\]; for (const { id, file } of AED\_LIST) // 4,934 ids incl. this one try { await fetch("chrome-extension://" + id + "/" + file); hits.push(id); } catch {} // not installed → silently swallowed fireTrackingPayload("AedEvent", { browserExtensionIds: hits }); // → POST /li/track // this extension is probed at: // chrome-extension://kaeigipjcamcanmmhgpniimjagdleoee/pixel.gif On LinkedIn’s AED list Yes 1 of 4,934 · snapshot Nov 2026 URL LinkedIn requests chrome-extension://kaeigipjcamcanmmhgpniimjagdleoee/pixel.gif the extension's ID + a file bundled inside it Store status Live on the Web Store Source LinkedIn bundle ℹ **Verify it yourself:** on linkedin.com open DevTools → Sources and search the page bundle for kaeigipjcamc… or AedEvent; or Network → filter li/track to watch the verdict ship. The scan runs even in Incognito. Below — the full code-level teardown. ![NetHunt CRM for Gmail — marketed on the Chrome Web Store, detected by LinkedIn](https://storage.googleapis.com/linkedhelper-sot/checker/shots/kaeigipjcamcanmmhgpniimjagdleoee.webp) Vendor's own Chrome Web Store screenshot — this extension is on LinkedIn's detection list. ## How LinkedIn fingerprints your browser while you use NetHunt CRM for Gmail Even after a cookie is copied out, LinkedIn keeps one more receipt on every request that follows — a 48-point snapshot of the exact machine making it. Faking it convincingly means reproducing that machine's quirks, not just editing a string. Click any signal above for what it means. These are illustrative values — this demo never reads your actual device. Your 48-point fingerprint — RSA-encrypted, attached to every API call in this session, not just login This extension runs inside your real browser, so its requests always carry your real fingerprint — that isn't something it controls, it's simply where its code executes. Verified against LinkedIn source-code, Nov 2026 snapshot. [Read full study](https://safe-outreach.com/how-we-test) ## Similar LinkedIn tools we checked Same architecture and risk as NetHunt CRM for Gmail — each with its own code audit. - [Is ConnectGenie safe on LinkedIn? MEDIUM](https://safe-outreach.com/is-connectgenie-safe) - [Is Linked Apply Bot safe on LinkedIn? MEDIUM](https://safe-outreach.com/is-linked-apply-bot-safe) - [Is Email Tracker for Gmail by EngageBay safe on LinkedIn? MEDIUM](https://safe-outreach.com/is-email-tracker-safe) - [Is RiteTag safe on LinkedIn? MEDIUM](https://safe-outreach.com/is-ritetag-safe) - [Is InTouchApp Phone Contacts & Data Saver safe on LinkedIn? MEDIUM](https://safe-outreach.com/is-intouchapp-phone-contacts-data-saver-safe) - [Is CRM, Phone Number & Email Finder for LinkedIn safe on LinkedIn? MEDIUM](https://safe-outreach.com/is-crm-safe) [All extension checks](https://safe-outreach.com/deep-dives#all-checks) --- Source: https://safe-outreach.com/is-nethunt-crm-safe