Is Asin Gadget safe?
Asin Gadget posts Amazon dangerous-goods ASIN matches to a Google Apps Script endpoint.
Asin Gadget checks Amazon Seller Central product responses for dangerous-goods status and sends the matched ASIN and result to a hardcoded script.google.com URL. Its rules also remove frame-protection headers for selected reputation sites in subframes, and its popup sends the current site's hostname to revroi.oaroulette.com for cashback and gift-card lookups.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
Who publishes itOA Hunt - no other listings under this identity, 6 shared hostnames
OA Hunt - no other listings under this identity, 6 shared hostnames
What this publisher told the store about itself, and the other listings that told it the same thing.
Shared hosts - 6 hostnames
Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
What it can do
Permissions this extension asks for, as declared in version 11.9. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Read and change your data on script.google.com
https://script.google.com/*
Read and change your data on app.oaroulette.com
https://app.oaroulette.com/asingadget
Read and change your data on plugin.myip.ms
https://plugin.myip.ms/*
Read and change your data on whois.com
*://*.whois.com/*
Read and change your data on safeweb.norton.com
*://safeweb.norton.com/*
Read and change your data on www.cashbackmonitor.com
https://www.cashbackmonitor.com/*
Read and change your data on www.cardbear.com
https://www.cardbear.com/*
Read and change your data on trustpilot.com
*://*.trustpilot.com/*
Read and change your data on scamadviser.com
*://*.scamadviser.com/*
Read and change your data on revroi.oaroulette.com
http://revroi.oaroulette.com/*
Read and change your data on api.scampredictor.com
https://api.scampredictor.com/*
Read and change your data on oahunt.com
https://oahunt.com/api/asin/customer
Read and change your data on www.rakuten.com
https://www.rakuten.com/*
Store data in your browser
storage
Add items to the right-click menu
contextMenus
See the address and title of every tab you have open
tabs
Block and redirect the requests your browser makes
declarativeNetRequest
Run its own code inside the pages you visit
scripting
Act on the current tab, but only after you click the extension
activeTab
Sign you in with your Google account
identity
See the email address of your Google account
identity.email
Where it sends data
Destinations our analysis observed Asin Gadget contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- script.google.com
Asin Gadget sends data to script.google.com. 12 other extensions we have analysed send data here.
- revroi.oaroulette.com
Asin Gadget sends data to revroi.oaroulette.com. No other extension we have analysed sends data here.