🛡️
Safe Outreach

Is Psychological AI safe on LinkedIn in 2026?

Risky — LinkedIn fingerprinted Psychological AI (we checked it ), and Psychological AI has since been removed from the Chrome Web Store (Nov 2026 snapshot). If an old copy of Psychological AI is still installed, LinkedIn keeps detecting it on every visit. Our automated scan of Psychological AI 1.0.71 found code that references LinkedIn's session cookie li_at (11 matches in 1 files); whether Psychological AI sends that cookie anywhere needs a manual dataflow review.

Updated · LinkedIn AED snapshot Nov 2026

ID: hegppmjkecopkbicfkecnlemdincdnfj

Does LinkedIn detect Psychological AI? What we found in its code

Fingerprinted & removed

LinkedIn audited this extension and fingerprinted its files in its client code. Since then, the extension has been removed or delisted from the Chrome Web Store (either by Google for policy violations, or by the developers to avoid bans).

Probed URL: chrome-extension://hegppmjkecopkbicfkecnlemdincdnfj/images/card/info.svg
Vulnerable

Scanning risk: If you currently have an old package of this extension active on your drive, LinkedIn continues to scan your browser using HTTP requests to its unique internal files.

What our automated scan found in Psychological AI's code

We downloaded Psychological AI version 1.0.71 from the Chrome Web Store on and searched its 16 code files for the patterns below. Each line shows the first place we found it.

  • Psychological AI's code references li_at — LinkedIn's session cookie, the one that keeps you logged in. 11 matches in 1 file — first at scripts/background.js:72.
  • Psychological AI's code references JSESSIONID — LinkedIn's CSRF cookie, needed to call LinkedIn's internal API as you. 11 matches in 1 file — first at scripts/background.js:73.
  • Psychological AI uses the Chrome cookies API (chrome.cookies), which reads cookies of every site it has access to. 11 matches in 1 file — first at scripts/background.js:71.
  • Psychological AI reads or writes document.cookie inside pages. 2 matches in 1 file — first at main.js:2.
  • Psychological AI creates synthetic clicks or keystrokes (dispatchEvent / MouseEvent) — LinkedIn can tell these from real input (isTrusted=false). 5 matches in 1 file — first at main.js:2.
  • Psychological AI runs code built at runtime (eval / new Function). 2 matches in 1 file — first at main.js:2.
  • Psychological AI makes its own network requests (fetch / XHR / WebSocket). 4 matches in 3 files — first at main.js:2.
  • Psychological AI's code mentions linkedin.com. 13 matches in 2 files — first at scripts/background.js:71.
Permissions Psychological AI asks for
storageactiveTabcookieshttps://*.linkedin.com/*https://*.psychological.ai/*https://*.100worte.de/dashboard/*

What this scan is — and isn't. It is an automated static search of the shipped package, not a full teardown: a match means the pattern is in the code, not that Psychological AI misuses it, and no match doesn't prove absence (minified or runtime-built code can hide it). We haven't traced where Psychological AI sends data. How we test

How LinkedIn checks for Psychological AI: the AED probe

That verdict isn't a guess. This is what LinkedIn's own page code does on every visit — simplified from its production bundle, which the BrowserGate investigation reverse-engineered line by line:

// LinkedIn's page bundle — simplified from BrowserGate's teardown
const hits = [];
for (const { id, file } of AED_LIST) // 4,934 ids incl. this one
try { await fetch("chrome-extension://" + id + "/" + file); hits.push(id); }
catch {} // not installed → silently swallowed
fireTrackingPayload("AedEvent", { browserExtensionIds: hits }); // → POST /li/track
// this extension is probed at:
// chrome-extension://hegppmjkecopkbicfkecnlemdincdnfj/images/card/info.svg
On LinkedIn’s AED list
Yes
1 of 4,934 · snapshot Nov 2026
URL LinkedIn requests
chrome-extension://hegppmjkecopkbicfkecnlemdincdnfj/images/card/info.svg
the extension's ID + a file bundled inside it
Store status
Flagged & removed
Source
LinkedIn bundle
ℹVerify it yourself: on linkedin.com open DevTools → Sources and search the page bundle for hegppmjkecop… or AedEvent; or Network → filter li/track to watch the verdict ship. The scan runs even in Incognito. Below — the full code-level teardown.
Psychological AI — marketed on the Chrome Web Store, detected by LinkedIn
Vendor's own Chrome Web Store screenshot — this extension is on LinkedIn's detection list.

How LinkedIn fingerprints your browser while you use Psychological AI

Even after a cookie is copied out, LinkedIn keeps one more receipt on every request that follows — a 48-point snapshot of the exact machine making it. Faking it convincingly means reproducing that machine's quirks, not just editing a string.

Click any signal above for what it means. These are illustrative values — this demo never reads your actual device.

Your 48-point fingerprint — RSA-encrypted, attached to every API call in this session, not just login

This extension runs inside your real browser, so its requests always carry your real fingerprint — that isn't something it controls, it's simply where its code executes.

Verified against LinkedIn source-code, Nov 2026 snapshot.Read full study

Similar LinkedIn tools we checked

Same architecture and risk as Psychological AI — each with its own code audit.

All extension checks