[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

Amazon Ads Blocker

Version 3.0.2 View in Chrome Web Store

Last scanned: about 4 hours ago

Extension Details

Rating: 4.3 ★

Users: 13

Context-Aware Verdict

HIGH

Overall Risk

Trust Factors:

The extension has extremely low adoption with only 13 users, which is concerning for any extension claiming to block ads on a major platform like Amazon. The 4.3 rating appears misleading given the tiny user base. No author or developer information is provided, creating anonymity concerns. The lack of transparency about who created this extension is a significant red flag.

Concerns:

The extension requests access to all Amazon domains globally, which is appropriate for its stated purpose but creates a large attack surface. With only 13 users, this extension lacks community vetting that would help identify malicious behavior. The broad permissions combined with access to shopping sites where users enter payment information creates potential for data theft. The anonymous developer status means no accountability if the extension turns malicious. The storage permission could be used to collect and store sensitive browsing data from Amazon sites.

Recommendations:

Avoid installing this extension due to the combination of anonymous developer, extremely low user count, and broad permissions to sensitive shopping domains. If you need Amazon ad blocking, choose a well-established extension with thousands of users and known developers. If you must test this extension, use it only in a separate Chrome profile with no saved payment methods or personal information. Consider using established ad blockers like uBlock Origin instead, which work across all sites including Amazon.

Findings

HIGH

Broad Host Permissions

This extension has broad host permissions allowing it to access many or all websites. This could potentially be used to steal sensitive data or track browsing activity.

MEDIUM

Access to Sensitive Domains

This extension requests access to sensitive domains: *://*.amazon.com/*, *://*.amazon.ca/*, *://*.amazon.com.mx/*, *://*.amazon.com.br/*, *://*.amazon.co.uk/*, *://*.amazon.de/*, *://*.amazon.fr/*, *://*.amazon.it/*, *://*.amazon.es/*, *://*.amazon.nl/*, *://*.amazon.se/*, *://*.amazon.pl/*, *://*.amazon.com.be/*, *://*.amazon.ie/*, *://*.amazon.co.jp/*, *://*.amazon.cn/*, *://*.amazon.in/*, *://*.amazon.sg/*, *://*.amazon.com.au/*, *://*.amazon.ae/*, *://*.amazon.sa/*, *://*.amazon.eg/*, *://*.amazon.tr/*. Ensure you trust this extension with access to these sites.

MEDIUM

Medium-Risk Permission: storage

This extension has the storage permission. Can store data locally.

Security Analysis Details

Required Permissions:

storage

Host Permissions:

*://*.amazon.com/*
*://*.amazon.ca/*
*://*.amazon.com.mx/*
*://*.amazon.com.br/*
*://*.amazon.co.uk/*
*://*.amazon.de/*
*://*.amazon.fr/*
*://*.amazon.it/*
*://*.amazon.es/*
*://*.amazon.nl/*
*://*.amazon.se/*
*://*.amazon.pl/*
*://*.amazon.com.be/*
*://*.amazon.ie/*
*://*.amazon.co.jp/*
*://*.amazon.cn/*
*://*.amazon.in/*
*://*.amazon.sg/*
*://*.amazon.com.au/*
*://*.amazon.ae/*
*://*.amazon.sa/*
*://*.amazon.eg/*
*://*.amazon.tr/*

Embedded URLs (27 total):

https://10xprofit.io/tools/?utm_source=chrome-extension	https://clients2.google.com/service/update2/crx
https://10xprofit.io/?utm_source=chrome-extension	https://www.amazon.com/dp/B0FW45F3ZJ/?tag=10xprofit-20
https://www.amazon.com/?tag=10xprofit-20	https://www.amazon.ca/
https://www.amazon.com.mx/	https://www.amazon.com.br/
https://www.amazon.co.uk/	https://www.amazon.de/
https://www.amazon.fr/	https://www.amazon.it/
https://www.amazon.es/	https://www.amazon.nl/
https://www.amazon.se/	https://www.amazon.pl/
https://www.amazon.com.be/	https://www.amazon.ie/
https://www.amazon.co.jp/	https://www.amazon.cn/
https://www.amazon.in/	https://www.amazon.sg/
https://www.amazon.com.au/	https://www.amazon.ae/
https://www.amazon.sa/	https://www.amazon.eg/
https://www.amazon.tr/

Raw Manifest

{
  "name": "Amazon Ads Blocker",
  "icons": {
    "16": "icons/icon16.png",
    "48": "icons/icon48.png",
    "128": "icons/icon128.png"
  },
  "action": {
    "default_icon": {
      "16": "icons/icon16.png",
      "48": "icons/icon48.png",
      "128": "icons/icon128.png"
    },
    "default_popup": "popup.html"
  },
  "version": "3.0.2",
  "background": {
    "service_worker": "background.js"
  },
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "Browse Amazon without 'Sponsored' ads. Enhances your shopping experience by hiding sponsored product blocks.",
  "permissions": [
    "storage"
  ],
  "content_scripts": [
    {
      "js": [
        "content.js"
      ],
      "css": [
        "styles.css"
      ],
      "run_at": "document_end",
      "matches": [
        "*://*.amazon.com/*",
        "*://*.amazon.ca/*",
        "*://*.amazon.com.mx/*",
        "*://*.amazon.com.br/*",
        "*://*.amazon.co.uk/*",
        "*://*.amazon.de/*",
        "*://*.amazon.fr/*",
        "*://*.amazon.it/*",
        "*://*.amazon.es/*",
        "*://*.amazon.nl/*",
        "*://*.amazon.se/*",
        "*://*.amazon.pl/*",
        "*://*.amazon.com.be/*",
        "*://*.amazon.ie/*",
        "*://*.amazon.co.jp/*",
        "*://*.amazon.cn/*",
        "*://*.amazon.in/*",
        "*://*.amazon.sg/*",
        "*://*.amazon.com.au/*",
        "*://*.amazon.ae/*",
        "*://*.amazon.sa/*",
        "*://*.amazon.eg/*",
        "*://*.amazon.tr/*"
      ]
    }
  ],
  "host_permissions": [
    "*://*.amazon.com/*",
    "*://*.amazon.ca/*",
    "*://*.amazon.com.mx/*",
    "*://*.amazon.com.br/*",
    "*://*.amazon.co.uk/*",
    "*://*.amazon.de/*",
    "*://*.amazon.fr/*",
    "*://*.amazon.it/*",
    "*://*.amazon.es/*",
    "*://*.amazon.nl/*",
    "*://*.amazon.se/*",
    "*://*.amazon.pl/*",
    "*://*.amazon.com.be/*",
    "*://*.amazon.ie/*",
    "*://*.amazon.co.jp/*",
    "*://*.amazon.cn/*",
    "*://*.amazon.in/*",
    "*://*.amazon.sg/*",
    "*://*.amazon.com.au/*",
    "*://*.amazon.ae/*",
    "*://*.amazon.sa/*",
    "*://*.amazon.eg/*",
    "*://*.amazon.tr/*"
  ],
  "manifest_version": 3
}

by ✦ Astarte