Firefox Add-ons
50Versions
0Code reviewed

Not reviewed

No code review on record

We have not reviewed this extension’s code, so we cannot vouch for it either way. Check the permissions below to decide whether it asks for more than it needs.

Want us to read this extension's code? Ask for a review and we'll queue it.

29 indicators in this extension

29 indicators
0 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

What our analysis found

GeoSpoof: Spoof Geolocation & Timezone, used by 4,248 people, is not yet reviewed by Extension Auditor. Its permissions mean it can read and change data on all websites, can inject scripts into pages and can observe network requests. It comes from a trusted publisher and was last updated in October 2026.

GeoSpoof: Spoof Geolocation & Timezone

GeoSpoof: Spoof Geolocation & Timezone Firefox extension security report

ID: geo-spoof

Extension Info & Metadata

Status
Active
Version
2.1.5
Size
0.75 MB
Rating
4.7/5
Reviews
21
Users
4,248
Type
Extension
Updated
Oct 9, 2026
Category
N/A
Price
Free
Featured
No
Visibility
Listed
Mature
No
By Google
No
Trusted
No
This publisherTrack record
6extensions
All still listed

Publisher Contextual Analysis

Trusted
Author
anthony
Country
GB
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
No
Mailbox exists
Yes
Address
Lakeside House Styche Market Drayton Shropshire TF9 3RB GB
Website
Visit
Extensions
6
Active
2
Obsolete
0
Listed
6
Unlisted
0
Users
8,185

Email Change History

1 change
Jun 24, 2026
Domain changed

Screenshots & videos

Screenshot 1
Screenshot 2
Screenshot 3
Screenshot 4
Screenshot 5

Install growth

Item
Type
Severity
Description
privacy
Permission
Critical
This permission allows modification of Chrome's privacy settings. Rated Critical because it can disable security features, modify network configurations, and compromise browser security settings.
proxy
Permission
Critical
This permission allows the extension to control the browser's proxy settings. Rated Critical because it can route all traffic through potentially malicious proxies, enabling man-in-the-middle attacks and traffic monitoring.
scripting
Permission
Critical
This permission allows injection and execution of JavaScript on any webpage. Rated Critical because it can modify page content, steal sensitive data, and inject malicious code into any site the extension has access to.
webRequest
Permission
Critical
This permission enables the extension to monitor and analyze all web requests made by the browser. Rated Critical because it can observe all network traffic including sensitive data, track browsing behavior, and gather authentication tokens.
webRequestBlocking
Permission
Critical
This permission allows the extension to intercept, modify, or block any web request in real-time before it reaches its destination. Rated Critical because it can modify sensitive data (like passwords, credit cards) before encryption, redirect traffic to malicious sites, or block security updates.
webRequestFilterResponse
Permission
Critical
This permission (Firefox) allows the extension to read and rewrite the body of any HTTP response before the page sees it. Rated Critical because it can exfiltrate page contents in transit and inject arbitrary code into any response.
<all_urls>
Host
Critical
Broad host access — the extension can read/modify content on every website.
Dangerous Permission Combination: scripting,<all_urls>,webRequest
Risk Factor
Critical
Enables sophisticated data theft through script injection and traffic monitoring
Dangerous Permission Combination: proxy,webRequestBlocking,webRequest
Risk Factor
Critical
Complete control over network traffic and routing
Dangerous Permission Combination
Risk Factor
Critical
This extension can intercept, modify, and block web requests in real-time.
Contextual Risk Factors
Risk Factor
High
The following context increases the overall risk:• 10% increase: Early script execution enables pre-emptive content manipulation
Broad Host Permissions
Risk Factor
High
This extension has broad host permissions allowing it to access many or all websites.
Broad Content Script Access
Risk Factor
High
This extension can inject scripts into any website.
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
Early Content Script Execution
Risk Factor
Medium
This extension runs content scripts at document_start.
alarms
Permission
Low
This permission schedules periodic tasks. Rated Low because it can only trigger events at specified times without access to sensitive data.
idle
Permission
Low
This permission detects system idle state. Rated Low because it only observes user activity state without access to activity details.
webRequestFilterResponse.serviceWorkerScript
Permission
Unknown
No classification available for this permission.

29 indicators in this extension

29 indicators
0 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

About this extension

Spoof geolocation, fake your GPS location and timezone — change your location to any city or sync it to your VPN. No account.

Read the publisher’s full description

<strong>🛡 Spoof geolocation, timezone, and every location signal — in one click.</strong> GeoSpoof is a privacy-first <strong>geolocation spoofer</strong> and <strong>location changer</strong> for Firefox. Flip one switch and every site reads the fake location you choose, not where you really are. A basic location changer just moves the map pin. GeoSpoof goes further — it aligns your <strong>timezone</strong>, blocks <strong>WebRTC IP leaks</strong>, and auto-syncs to your <strong>VPN</strong>, so every signal matches your chosen spot. Pick a city, type exact coordinates, or let GeoSpoof match your VPN automatically. Turn it off anytime and your real position returns untouched. <strong>⭐ Why people choose GeoSpoof over a basic location changer</strong> <ol><li><strong>Set a fake GPS location in one click</strong> — any city or exact coordinates.</li><li><strong>VPN Sync</strong> — detect your VPN's exit region and match your location to it.</li><li><strong>Auto background sync</strong> — switch VPN servers and your location follows automatically.</li><li><strong>Timezone too</strong> — clock and date match your location, so nothing gives you away.</li><li><strong>Block WebRTC leaks</strong> — keep your real IP hidden, even behind a VPN.</li><li><strong>Worker-level timezone protection</strong> — closes worker and cold-start leaks, with optional first-script coverage.</li><li><strong>Anti-fingerprinting</strong> — every signal stays consistent, so your location holds up.</li><li><strong>Per-site control</strong> — allowlist or denylist which sites get spoofed.</li><li><strong>Save favorites</strong> — pin up to 10 places, switch in a tap.</li><li><strong>No account, no tracking, no analytics</strong> — everything stays on your device.</li></ol> <strong>📍 Set your fake location any way you like</strong> <ul><li>Search by city or address and land on the exact spot.</li><li>Enter precise latitude and longitude by hand for a clean GPS fix.</li><li>Tune accuracy, from realistic to a custom meter value.</li><li>Save the places you use most and reuse them instantly.</li></ul> <strong>🌍 Spoof geolocation with or without a VPN</strong> A VPN changes your IP. GeoSpoof rewrites the coordinates your browser reports through the geolocation API — and can sync the two together. Run it solo, or pair it with your VPN so your IP, location, and timezone all tell the same story. <strong>🔒 Privacy comes first</strong> <ul><li>Everything runs on your device — GeoSpoof never sends your real location to a server.</li><li>No account, no tracking, no analytics. Settings live locally.</li><li><em>Open source</em> — review exactly what it does on <a href="https://prod.outgoing.prod.webservices.mozgcp.net/v1/fd5fc2c66efa2d829ef7fb6d2777d7169ec741475d43218fca94f7da626598de/https%3A//github.com/anthonysgro/geospoof" rel="nofollow">GitHub</a>.</li><li>Turn protection off and your genuine coordinates return untouched.</li></ul> <strong>💡 Who it's for</strong> <ul><li>Privacy-minded people who don't want sites logging where they are.</li><li>Developers testing location, timezone, and region features.</li><li>Anyone reaching region-specific content and services.</li><li>VPN users who want their browser location to match their exit node.</li></ul> <strong>❓ FAQ</strong> 📌 <strong>Will sites still see my real location?</strong> No. While protection is on, the browser returns the spot you picked. 📌 <strong>Is this a VPN?</strong> No. GeoSpoof changes the coordinates your browser reports, not your IP. It pairs perfectly with a VPN and can even sync to it automatically. 📌 <strong>Can I set an exact point?</strong> Yes. Enter precise latitude and longitude, or search a city, for a clean GPS spoof. 📌 <strong>Does it change my timezone too?</strong> Yes. GeoSpoof spoofs your timezone alongside your location so the two always match — a giveaway that location-only changers miss. 📌 <strong>Is this just a location changer?</strong> It's a location changer and more. GeoSpoof sets a fake location, then also matches your timezone and blocks WebRTC leaks so nothing contradicts it. 📌 <strong>Does it work on Google Maps?</strong> Yes. GeoSpoof works on any site that uses the browser geolocation API. 📌 <strong>Is my data safe?</strong> Yes. GeoSpoof runs locally, collects nothing, and is open source. Nothing about your location leaves your device. 📌 <strong>Do I need to sign up?</strong> No account and no setup. Install and start changing your location right away. <strong>📲 Now on iPhone, iPad &amp; Mac too.</strong> Install GeoSpoof, set a fake location, and decide exactly what the web sees about where you are. Links: <ul><li><a href="https://prod.outgoing.prod.webservices.mozgcp.net/v1/00fd7500f349d5934132169f65a9dbcaedfeae59ef96790bb6700dab01a9d32d/https%3A//geospoof.com" rel="nofollow">geospoof.com</a></li><li><a href="https://prod.outgoing.prod.webservices.mozgcp.net/v1/fd5fc2c66efa2d829ef7fb6d2777d7169ec741475d43218fca94f7da626598de/https%3A//github.com/anthonysgro/geospoof" rel="nofollow">GitHub</a></li></ul>

User reviews

Extension files

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

URLs
29

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found
No IP addresses found

29 indicators in this extension

29 indicators
0 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe
Version
Size
Verdict
Findings
Permhash
1.4.0
Latest
0.30 MBNot scanned—
f6c471eaf51a56f297ed7c63f00d6bb81e9b028cdf34b39cd58af338f3141582
1.8.0
0.12 MBNot scanned—
f6c471eaf51a56f297ed7c63f00d6bb81e9b028cdf34b39cd58af338f3141582
1.9.0
0.12 MBNot scanned—
f6c471eaf51a56f297ed7c63f00d6bb81e9b028cdf34b39cd58af338f3141582
1.10.0
0.12 MBNot scanned—
f6c471eaf51a56f297ed7c63f00d6bb81e9b028cdf34b39cd58af338f3141582
1.11.0
0.12 MBNot scanned—
f6c471eaf51a56f297ed7c63f00d6bb81e9b028cdf34b39cd58af338f3141582
1.12.0
0.12 MBNot scanned—
8ab5f7b5679abe83aff89d8775e040bb6680f7b11fd17337c474b30c3824c36f
1.13.0
0.12 MBNot scanned—
8ab5f7b5679abe83aff89d8775e040bb6680f7b11fd17337c474b30c3824c36f
1.14.0
0.12 MBNot scanned—
8ab5f7b5679abe83aff89d8775e040bb6680f7b11fd17337c474b30c3824c36f
1.17.8
0.13 MBNot scanned—
8ab5f7b5679abe83aff89d8775e040bb6680f7b11fd17337c474b30c3824c36f
1.17.11
0.13 MBNot scanned—
8ab5f7b5679abe83aff89d8775e040bb6680f7b11fd17337c474b30c3824c36f
Showing 1 to 10 of 50 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

Gain full insight into all external connections.

Upgrade for full visibility.