[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

Profit Protector Pro

Version 3.1.1 View in Chrome Web Store

Last scanned: about 15 hours ago

Extension Details

Rating: 5.0 ★ (7 ratings)

Users: 2,000

Context-Aware Verdict

HIGH

Overall Risk

Trust Factors: The extension has concerning trust indicators including a very small user base of only 2,000 users, limited rating data with just 7 reviews despite a perfect 5.0 score, and missing critical information such as developer details and last update date. The lack of transparency around the developer identity is particularly concerning for an extension that claims to protect profits and has extensive access to Amazon domains.

Concerns: The extension's broad content script access across 19 different Amazon domains worldwide is excessive and potentially suspicious for a "profit protection" tool. This level of access could enable comprehensive tracking of shopping behavior, price monitoring, or data harvesting across multiple international Amazon sites. The combination of storage permissions with such extensive Amazon access creates potential for collecting and storing sensitive shopping data, purchase history, and personal information. The vague extension name and description provide little clarity about the actual functionality, making it difficult to assess whether the requested permissions are justified.

Recommendations: Given the high risk profile, avoid installing this extension on your primary browser profile. If you must use it, create a dedicated Chrome profile specifically for this extension to isolate potential security risks. Consider alternative profit protection tools from more established developers with transparent privacy policies and clearer functionality descriptions. Monitor your Amazon accounts closely for any unusual activity if you choose to proceed with installation.

Findings

HIGH

Broad Host Permissions

This extension has broad host permissions allowing it to access many or all websites. This could potentially be used to steal sensitive data or track browsing activity.

MEDIUM

Medium-Risk Permission: activeTab

This extension has the activeTab permission. Can access the active tab when clicking the extension icon.

MEDIUM

Medium-Risk Permission: storage

This extension has the storage permission. Can store data locally.

Raw Manifest

{
  "name": "Profit Protector Pro",
  "icons": {
    "16": "images/pppicon16.png",
    "32": "images/pppicon32.png",
    "48": "images/pppicon48.png",
    "128": "images/pppicon128.png"
  },
  "action": {
    "default_popup": "popup.html",
    "default_title": "Profit Protector Pro"
  },
  "version": "3.1.1",
  "background": {
    "service_worker": "background.js"
  },
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "Maximise your profit when selling on Amazon",
  "permissions": [
    "activeTab",
    "storage"
  ],
  "content_scripts": [
    {
      "js": [
        "contentscript.js"
      ],
      "run_at": "document_end",
      "matches": [
        "*://www.profitprotectorpro.com/*",
        "*://www.amazon.com/*",
        "*://www.amazon.co.uk/*",
        "*://www.amazon.de/*",
        "*://www.amazon.fr/*",
        "*://www.amazon.it/*",
        "*://www.amazon.es/*",
        "*://www.amazon.nl/*",
        "*://www.amazon.se/*",
        "*://www.amazon.ca/*",
        "*://www.amazon.com.mx/*",
        "*://www.amazon.pl/*",
        "*://www.amazon.com.be/*",
        "*://www.amazon.eg/*",
        "*://www.amazon.com.tr/*",
        "*://www.amazon.ae/*",
        "*://www.amazon.sa/*",
        "*://www.amazon.in/*",
        "*://www.amazon.com.br/*",
        "*://www.amazon.ie/*"
      ]
    }
  ],
  "host_permissions": [
    "*://*.profitprotectorpro.com/*"
  ],
  "manifest_version": 3
}

by ✦ Astarte

Profit Protector Pro

Extension Details

Context-Aware Verdict

Findings

Security Analysis Details

Required Permissions:

Host Permissions:

Embedded URLs (3 total):

Raw Manifest

Detections

Manifest Findings

http://www.w3.org/2000/svg	https://clients2.google.com/service/update2/crx
https://extension.profitprotectorpro.com/app/addasin_extension.php?asin=