Is AutoBuy Flash Sales, Deals, and Coupons safe?
AutoBuy Flash Sales, Deals, and Coupons sends shopping-page URLs to its coupon service and rewrites Flipkart product clicks.
When a tab finishes loading on a remotely configured shopping hostname, the background worker posts the full page URL to getmatchingcouponsanddeals.info to retrieve deals or coupons. On Flipkart product links with a pid parameter, the content script intercepts the click and routes the destination through goto.fpkrt.cc before opening it.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Findings
Flipkart product clicks are routed through an affiliate redirect endpoint
When you click a Flipkart product link, the extension redirects navigation to goto.fpkrt.cc.
That redirect includes the original Flipkart product URL in a dl parameter, so the endpoint gets the URL tied to your click.
- Severity
- Medium unwanted
- Type
- Unexpected
- CWE
- CWE-506
- Source
- Dynamic sandbox
The user clicks a Flipkart product link.
The extension rewrites the navigation through an affiliate redirect endpoint that includes the original product URL.
- Flipkart product URLhttps://www.flipkart.com/example-product/p/itm123?pid=ABC123 (illustrative)
This tells the redirect endpoint which product page you clicked before the navigation was rewritten.
What it can do
Permissions this extension asks for, as declared in version 2.3.4. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Read and change your data on every site you visit
<all_urls>
Store data in your browser
storage
See the address and title of every tab you have open
tabs
Keep running in the background while your browser is open
background
Where it sends data
Destinations our analysis observed AutoBuy Flash Sales, Deals, and Coupons contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- goto.fpkrt.cc
AutoBuy Flash Sales, Deals, and Coupons sends data to goto.fpkrt.cc. One other extension we have analysed sends data here.
- getmatchingcouponsanddeals.info
AutoBuy Flash Sales, Deals, and Coupons sends data to getmatchingcouponsanddeals.info. No other extension we have analysed sends data here.