What is connecting out to -s1815.webovernet.com - What is this?

[polonus]

Within a Fiddler session I see a tunnel connection out to -s1815.webovernet.com
There it has API - Is this some browser extension spying on me while Google Chrome closes an eye to the tracking?
See: https://www.virustotal.com/en/domain/api29.webovernet.com/information/
It is being hosted here: 8e.6e.2d.static.xlhost.com  - tls-nextprotoneg:
Netcraft risk score 2 red out of 10: http://toolbar.netcraft.com/site_report/?url=s1815.webovernet.com
Read: http://www.howtogeek.com/180175/warning-your-browser-extensions-are-spying-on-you/
Their servers are everywhere: http://oldcp.dnsmadeeasy.com/s0306/aboutus/net.html

I blocked it now via HTTP Switchboard.

polonus

[polonus]

It could be something like this: https://mig5.net/content/awesome-screenshot-and-niki-bot
I now know what is the offending extension: Webpage Screenshot - flagged by Extension Defender!

pol

[polonus]

Here is a list of Google Chrome extensions that may spy on you: http://malwaretips.com/threads/list-of-browser-extensions-that-are-spying-on-you-chrome-and-firefox-htg.22459/
Without now Extension Defender and finding out via a Fiddler session that there was hidden API tracking going on to share my info with whoever, I had been in the dark about it. Worst thing is that Google does not allow this according their extension rules, but silently seems to condone this tracking.
And they only allow extensions when Google Analytics for Apps is allowed to track usage: https://developer.chrome.com/extensions/tut_analytics
Re: http://src.chromium.org/viewvc/chrome/trunk/src/chrome/common/extensions/docs/examples/
-> http://src.chromium.org/viewvc/chrome/trunk/src/chrome/common/extensions/docs/examples/api/

Google Analytics is like any other web analytics service helps the webmaster know what popular sites and keywords that their visitors have entered. It also helps to identify who their referrers are but it can pose privacy and security risk. An example is the recent security and privacy incident when Google, Intel, Adobe and other big company have become victims by hackers that attacked them via the flaw in a very old version of IE, and the attack has been dubbed as “Operation Aurora”. The IP addresses of the visitors of those affected company or websites has been released to hackers, as per reports. You don’t have to prevent visiting the website, forum or blog who uses Google Analytics. Simply block Google Analytics code, if you wish.

Quote from  Donna Buenaventura•edited by: Lamar Stonecypher

HTTP Switchboard is a great extension to stop any tracking by toggling it's permissions (set green to red).

polonus