Checker
Teamleader Integrations

Is Teamleader Integrations safe on LinkedIn?

ID: bgniimmgelhhbmnfoklafdfhdogadlhm
Teamleader Integrations — marketed on the Chrome Web Store, detected by LinkedIn
Vendor's own Chrome Web Store screenshot — this extension is on LinkedIn's detection list.
Est. Active Users

10K+

Store Version

4.0.15

Last Synced

2026-05-11

Description

This extension implements Teamleader functionality into other services such as Gmail and LinkedIn.

Detected by LinkedIn

This browser extension is actively compiled into LinkedIn's frontend detection lists. LinkedIn's scripts can detect when this is active on your browser.

LinkedIn requests probe file: gmailGlobals.js
DETECTED

What this means: detection isn't an instant ban — it's one input to LinkedIn's risk score. But it's a standing signal: it stacks with your behavior (volume, programmatic clicks) and device fingerprint, and this is just the AED list — one of LinkedIn's three detection systems (see how it works).

How Teamleader Integrations hooks into your LinkedIn tab

There's no 'authorize with LinkedIn' step anywhere. Simplified from its manifest — here's what actually happens between install and your first page load.

linkedin.com

Permissions granted on install:

scriptingmanagementidentitystorage

4 permissions requested — no LinkedIn login involved

Step 1 of 3 — Install
How LinkedIn detects it — the AED probe

That verdict isn't a guess. This is what LinkedIn's own page code does on every visit — simplified from its production bundle, which the BrowserGate investigation reverse-engineered line by line:

// LinkedIn's page bundle — simplified from BrowserGate's teardown
const hits = [];
for (const { id, file } of AED_LIST) // 6,153 ids incl. this one
try { await fetch("chrome-extension://" + id + "/" + file); hits.push(id); }
catch {} // not installed → silently swallowed
fireTrackingPayload("AedEvent", { browserExtensionIds: hits }); // → POST /li/track
// this extension is probed at:
// chrome-extension://bgniimmgelhhbmnfoklafdfhdogadlhm/gmailGlobals.js
On LinkedIn’s AED list
Yes
1 of 6,153 · snapshot Jun 2026
Probe file requested
gmailGlobals.js
Probe-able files
2 exposed
files any page can load — LinkedIn can probe any of them
How LinkedIn labels it
“Teamleader Integrations”
Store status
Live on the Web Store
Source
LinkedIn bundle
ℹVerify it yourself: on linkedin.com open DevTools → Sources and search the page bundle for bgniimmgelhh… or AedEvent; or Network → filter li/track to watch the verdict ship. The scan runs even in Incognito. Below — the full code-level teardown.
How we analysed this

We downloaded Teamleader Integrations's published Chrome Web Store package, de-minified it, and read it file by file — no live LinkedIn login. Two ways to see how:

Downloaded straight from the Chrome Web Store — the exact file your browser would install.

0/3 stages run
See the full method, step by step
How your session and data leak

Where your session and data actually go, reconstructed from Teamleader Integrations's code. Teamleader Integrations keeps your session in your browser — it calls LinkedIn's Voyager API using your own csrf token, and only uploads results.

Voyager via csrfprofile dataresults onlyAED probe💻 Youyour LinkedIn session🧩 Teamleader Integrationsbrowser extensionLinkedIn☁️ Vendor backendfocus.teamleader.eu
Sessions answering to this login right now: 1🍪 no `cookies` permission requested — nothing to open

red = your session/data leaving your machine · blue/green = stays local or only results leave · dashed = LinkedIn's own detection probes

ℹLinkedIn's own "where you're logged in" page does not gain a second entry from this — a replayed cookie isn't a new login, it's the same session answering from a second place.
Parallel sessions — one login, two networks

LinkedIn doesn't need to know anything about proxies to catch this — it just needs one login cookie answering from two networks at the same time.

💻 Your deviceyour real networkLinkedIn☁️ focus.teamleade…idle — nothing to send

Teamleader Integrations keeps your session on your own device, so there's only ever one network this login answers from — there's nothing here for LinkedIn's parallel-access check to catch.

We actually measured this

We measured real exit-IP reputation for 7 vendor clouds in a dedicated study — Teamleader Integrations's own infrastructure wasn't in that sample. The mechanism a session-upload creates is identical regardless: two networks, one cookie.

ℹCheck LinkedIn's own "where you're logged in" page after playing this — it stays unchanged, because to LinkedIn a replayed cookie was never a new login.

Does LinkedIn detect Teamleader Integrations? What we found in its code

Everything we confirmed in Teamleader Integrations's code, grouped by what it means for your account. Red = strongest detection / risk signals, amber = notable, grey = neutral or local-only.

We read this extension's codeMEDIUM RISK

Runs locally — session stays in your browser · on LinkedIn's detection list

Detection surface

Signals LinkedIn's own page scripts can pick up directly on every visit — the extension probe (AED), code injected into the page (Spectroscopy), fake (isTrusted:false) clicks, blocked/missing telemetry, and cloud remote-control. Each adds points to its risk score.

AED-listed · probe gmailGlobals.jsDirect Voyager APISynthetic clicks (isTrusted:false)
Your session

How the tool touches your LinkedIn login. If it uploads your session cookie to the vendor's cloud, the vendor can act as you from another IP — LinkedIn's loudest parallel-access tell. Reading the cookie locally (csrf/Voyager) is far less risky.

no session access
Where your data goes

Every outbound destination found in the code — your session / scraped data, plus analytics, CRM pushes and CAPTCHA-solving services. LinkedIn can't see these, but it's where your data actually ends up.

focus.teamleader.eu (profile fields only, not the session)
Permissions requested

Chrome permissions the extension was granted on install. The highlighted ones are the powerful kind — cookies (read your session), webRequest/declarativeNetRequest (watch & rewrite traffic, incl. blocking LinkedIn's telemetry), scripting/tabs (inject into pages).

scriptingmanagementidentitystorage
Evidence (signal counts)

How many times each tell-tale pattern appears in the extension's code — the raw proof behind everything above (e.g. li_at = session-cookie reads, voyager/csrf = LinkedIn API calls, synthetic_event = fake clicks, recaptcha = challenge handling).

jsessionid ×1csrf ×1voyager ×4graphql ×2document_cookie ×1synthetic_event ×27remote_script ×1new_function ×4
0 capabilities mapped · 3 settings · MV3
How LinkedIn fingerprints your browser

Even after a cookie is copied out, LinkedIn keeps one more receipt on every request that follows — a 48-point snapshot of the exact machine making it. Faking it convincingly means reproducing that machine's quirks, not just editing a string.

Press play to run the scan. These are illustrative values — this demo never reads your actual device.

Verified against LinkedIn source-code, Jun 2026 snapshot.Read full study

Teamleader Integrations — FAQ

Is Teamleader Integrations safe to use on LinkedIn?

Our static code audit rates Teamleader Integrations MEDIUM risk. It works through your own logged-in browser session — your cookie stays on your machine and only scraped results are uploaded — which is safer than cloud tools that take your session. It is still a Chrome extension LinkedIn can detect, and its ID is on LinkedIn's detection list.

Does LinkedIn detect Teamleader Integrations?

Yes. Teamleader Integrations's extension ID is on LinkedIn's active extension-detection (AED) list, so LinkedIn's page code probes for it on every visit (it requests the file gmailGlobals.js) — LinkedIn knows the extension is installed before you do anything.

Can Teamleader Integrations get my LinkedIn account banned or restricted?

Detection isn't an instant ban — LinkedIn scores accounts on many cumulative signals. But Teamleader Integrations stacks a known extension ID on LinkedIn's list, programmatic (isTrusted:false) clicks, and independent reviews report restrictions and permanent bans for Chrome-extension automators. Safe daily limits reduce the behavioral risk but can't offset a detectable architecture.

Does Teamleader Integrations have access to my LinkedIn account?

It reads LinkedIn data through your own browser session (the Voyager API) and uploads only the results — your session token itself stays on your machine.

How does Teamleader Integrations work — is it a Chrome extension or a cloud tool?

Teamleader Integrations is a extension (local-scrape CRM sidebar) that runs inside your own Chrome browser.

What is a safer alternative to Teamleader Integrations?

A standalone desktop app such as Linked Helper removes the two extension-specific detection surfaces: there is no Chrome-Store ID for LinkedIn's AED scanner to probe and nothing injected into the page for its DOM scan, and your session never leaves your machine. No tool is unbannable, but the surface it exposes is far smaller.

🛡️
Reader offer · 20% off + free trial

This one's detectable. Switch to the desktop app — and get 20% off.

The one tool we tore down that isn't a browser extension at all — so it leaves LinkedIn the smallest surface to detect.

✔ No extension ID✔ Nothing injected✔ Session stays local

Affiliate link — you get 20% off, we may earn a commission. No spam; unsubscribe anytime.

© 2026 Safe Outreach (safe-outreach.com) — an independent project. Not affiliated with or endorsed by LinkedIn. We're an affiliate of Linked Helper: if you sign up through our link we may earn a commission, at no extra cost to you (you save 20%).