Browser extensions starting with S

SMARTe Prospector reports every visited tab's URL to its own docked panel and dumps LinkedIn Sales Navigator page content to its backend.

Streaming Skipper reports your Paramount+ account activity to a third-party server and sends your email address to a second one.

SoundMagic sends the address of every .html, .xml and audio page you open to redcoolmedia.net.

SLTD WA Sender posts your WhatsApp phone, name and email to a vendor CRM endpoint when you first sign up.

Sapher Shield sends every website you visit to its own servers for a real-time trust check.

Selling Keyword shows Naver search keyword volumes by querying the Naver SearchAd API with keywords you search.

SOAPNoteAI records telehealth session audio and uploads it to its own servers to generate SOAP notes.

Sender Flow sends incoming WhatsApp message text to senderflow.com.br when its warm-up toggle is on.

Smart Office relays messages from any localhost page to its native messaging host without an origin check.

StyleGuard Pro rewrites the Content-Security-Policy on every page it loads to allow scripts from saas.styleguard.com.

SignalCore sends click and keypress labels from tbank.ru terminal pages to api.signalcore.ru as usage telemetry.

Socialscope reads your TikTok account info and ads session headers and sends them to its own backend.

Save Story for Instagram downloads files from any URL that a web page posts to it, with no origin check.

Selfotix sends your account email, license key and a persistent device ID to its own server when scraping credits change.

Snakes & Ladders loads a server-controlled ad image and link from multiaccount.cloudapi.stream during play.

Slinko redirects pages on shopping and rewards sites to the vendor's own referral links, at most once per 24 hours per site.

Smart Shopper by Scroll.in sends the hostname of shopping sites you visit to Kindred's partner API to look up coupons.

Soreli fetches shared Copart and IAAI login passwords from sorex.ge and fills them into auction login forms.

Savely sends the URL, title and price of detected product pages, plus your country, to its own servers.

Search with Gemini Bard Summarizer reuses your existing ChatGPT and Bard sessions to answer questions from a right-click menu.

Staking Crypto strips X-Frame-Options and CSP headers from Google, Stripe and hexn.io frames browser-wide, not just its own tab.

Slot Ramses is a self-contained slot machine game that runs entirely within a browser tab and does not collect browsing data.

SHEIN Price Tracker lets any web page trigger image fetches that are uploaded to api.aiprice.com.

Shein image downloader uploads product details from three Korean shopping sites to AiPrice servers automatically.

Sales Whats Brasil sends WhatsApp voice messages to Hiperchat servers when you use its transcription button.

Symplify sends selected or OCR'd medical history text to a Cloudflare Workers proxy when you trigger it.

SkyDM reads a Bluesky post's replies, quotes, reposts, and likes to build a bulk outreach list, then sends automated DMs from the user's own account.

Spotify Web Player Search sets chromecrxstore.com as Chrome's default search provider.

SimplyBestCoupons fetches its affiliate and merchant config over plaintext HTTP from cdn.simplybestcoupons.com.

SiteShield sends the full URL of every page you load to plug2025.bm-com.com, whether or not it is blocked.

Spending Calculator for Amazon reads your Amazon order history and account contact details and sends them to ecombullet.com.

SLTD WA Sender sends signup details and marketing-attribution cookies to the vendor's lead-tracking backend.

SpeedNetworkingLive sends the URL of meeting pages you open to mymosttrusted.net on every tab load.

Shopify Spy Pro sends your Chrome profile email and each detected Shopify store's URL to thinksolv.com.

Spotify Web Player Search sets chromecrxstore.com as the default search engine, which its listing does not mention.

SYS.AO adds a WhatsApp Web helper that sends voice messages to a speech-to-text server when you click Transcribe.

sslspeedy2 loads JavaScript from 678in.com and uses it to set the browser's proxy settings.

Search Switch sets your default search engine to customserp.com instead of the Bing integration it advertises.

Sentience runs its wallet's plugin sandbox inside its own marketing website instead of MetaMask's isolated execution page.

Sunil Edutech for Teacher sends lesson-plan prompts to OpenAI using an API key hardcoded in the extension.

Smart Filters downloads its URL-rewriting rules from smarturlcleaner.com every 30 minutes and installs them on all sites.

Split Desktop Extension sends each visited site's domain to api2.split.co and can redirect tabs to affiliate links.

SnapCise fetches script URLs from a remote config and injects them into Instagram, YouTube and TikTok pages.

Soflers Ecommerce Data Extractor scrapes marketplace search results and reports scrape-session details to soflers.click2api.in.

Sidegame SkySpeedster opens a side panel game that connects to gamewss.cloudapi.stream and displays server-pushed ad content.

S.Context Gadget blanks the Content-Security-Policy header on every google.com request so it can inject Sateraito iframes.

SoMail sends the recipients, subject and body of every Gmail email you send to its own server.

Search by image on Amazon AZ sends the full URL of pages you visit to apiheaven.io and can redirect your tabs.

Session Collector encrypts your saved tab sessions with a key anyone can derive from your email address alone.

Shop a Tree sends the full URL of every https page you visit to shopatree.de.

Sitekick loads a hidden widget frame from sitekick.app on every https page, passing the visited hostname.

sslspeedy runs JavaScript from 678in.com in its popup and routes non-.cn traffic through a proxy that server picks.

Secure access to Discord sends each page URL you visit, about once a day, to www.winfy.net.

SellersTracker sends a per-install ID and a stored-seller count to the vendor's Airtable base once a day.

Similar Feed automatically reads up to 500 recent history items and all bookmarks each day and sends up to 30 of them to a backend.

Sloboda fetches text find-and-replace rules from supersemalt.com and rewrites text on every http(s) page you visit.

Sellerwork adds CRM tools to WhatsApp Web and sends usage analytics to Google Analytics.

Soflers JD Data Extractor sends scrape status, counts and search keywords to its vendor's licensing server.

Sales Boost Connect sends your WhatsApp number, profile name and Chrome email to wa-web-plus.web.app.

Soflers IM Data Extractor sends scrape-job activity and your email and license key to scraper.resellerplus.in.