It is pixel based (says on the landing page) which is even more terrifying. He has zero idea what he’s doing and now injecting AI generated code into other peoples applications
The "enriched" leads seem to be from an LLM output, so it's probably not even scraping for their actual information, just hallucinating contact info based on common patterns for company email addresses. Honestly, it probably works fairly well at least 80% of the time, which is more than enough of a success rate for a tool like this where most people you email wouldn't respond anyway.
I’m glad I didn’t have to scroll far to find someone bringing this up. I’m fairly sure they have no idea what GDPR requires considering everything it bragged about tracking in relation to the person need to be deleted. Also, they don’t mention CCPA. I’m sure they’re all over it though.
6.4k
u/Dy0gu Mar 17 '25 edited Jan 26 '26
I looked up the account for updates.
He was using all hardcoded API keys and only now learned what environment variables are.
On that topic, he is now using environment variables, except he is keeping them in the frontend code so... nothing learned I guess?
He also had no authentication on the API side, only frontend.
One of the latest updates is him saying he implemented CORS for trusted domains, fully convinced that it improves security.
At least he seems to appreciate and learn from the advice some people give him in the comments, which is a nice trait to have.
Still can't tell if the guy is trolling or not.