Who makes Công cụ đặt hàng của Order hàng Taobao?

Công cụ đặt hàng của Order hàng Taobao is published by Gobiz Ext Developer.

What servers does Công cụ đặt hàng của Order hàng Taobao send data to?

Our analysis observed Công cụ đặt hàng của Order hàng Taobao sending data to blackhole.sabomall.com and cashback.gobiz.dev.

Is Công cụ đặt hàng của Order hàng Taobao safe?

Q: Is Công cụ đặt hàng của Order hàng Taobao safe?

Công cụ đặt hàng của Order hàng Taobao is medium risk. Watches Taobao/Tmall/1688/Pinduoduo pages and sends the product record to cashback.gobiz.dev/ingester/products, saving it locally. Every 30 min the worker also sends it to blackhole.sabomall.com/api/v1/products; neither host disclosed. Runs on every website, scanning links each second for Taobao/Tmall/1688/Yangkeduo patterns, sending matches to cashback.gobiz.dev/public/kui/shorten/generate_batch, then rewriting them; one reply carried the operator's own affiliate ID.

Medium risk

The extension sends shopping-page product details and product links to Gobiz and Sabomall services.

On supported marketplace product pages, it collects product records such as URLs, names, prices, images, merchant details, stock, sales counts, and SKU data, then posts them to Gobiz and Sabomall endpoints. It also scans page links on loaded pages, sends matching marketplace product URLs to Gobiz for shortening, and rewrites those links with the returned URLs.

Gobiz Ext Developerv7.0914.1643Chrome Web Store

51Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Findings

Product pages you view are copied to two remote collection servers

Watches Taobao/Tmall/1688/Pinduoduo pages and sends the product record to cashback.gobiz.dev/ingester/products, saving it locally.

Every 30 min the worker also sends it to blackhole.sabomall.com/api/v1/products; neither host disclosed.

Severity: Medium unwanted
Type: Unexpected
CWE: CWE-359
Source: Dynamic sandbox

What actually happens

You did this

The user opens a product-detail page on a supported marketplace such as Taobao, Tmall, 1688, or Big C Thailand.

The content script is declared for every website, but this behavior only runs once it recognizes a supported marketplace's product-page URL pattern.

The extension did this

The extension reads the product's name, price, images, and other listing fields from the page and sends the record to a remote collection server.

The same record is also stored locally and later relayed to a second server by the background service worker.

Captured request

POSThttps://cashback.gobiz.dev/ingester/products

This specific request did not complete: status 0, net::ERR_FAILED, after the preflight OPTIONS request to the same endpoint received a 403. The request was still fully constructed and sent by the extension's own code with the real product record in the body, which is what this block captures.

Headers

Referer: https://www.bigc.co.th/
Content-Type: application/json

Body

[  {    "brand": "",    "collector": {      "id": "gobiz-linga",      "type": "gobiz-linga",      "user": "",      "version": "6.1301.1628"    },    "currency": "THB",    "description": "",    "detail": "",    "featuredImage": "https://st.bigc-cs.com/cdn-cgi/image/format=webp,quality=90/public/media/catalog/product/18/88/8851959143018/8851959143018_2-20260604145417-.jpg",    "invoicePrice": null,    "marketSegment": "",    "marketplace": "bigc",    "material": "",    "merchant": {      "age": 0,      "avatar": "",      "company": "",      "locations": [],      "marketplace": "bigc",      "name": "",      "oid": "",      "loyaltyRate": 0,      "deliveryRating": 0,      "overallRating": 0,      "productRating": 0,      "serviceRating": 0,      "totalSold": 0,      "url": ""    },    "msrp": null,    "name": "โค้ก น้ำอัดลม รสออริจินัล สูตรน้ำตาลน้อยกว่า 1.5 ล.",    "oid": "704",    "overallRating": null,    "pricePolicies": [],    "productImages": [],    "salePrice": 30,    "skus": [],    "stock": null,    "totalRates": null,    "totalSold": 0,    "url": "https://www.bigc.co.th/product/coke-original-less-sugar-soft-drink-1-5-l-8851959143018.704"  }]

Fields in the uploaded product record

Product page URL
https://www.bigc.co.th/product/coke-original-less-sugar-soft-drink-1-5-l-8851959143018.704
The exact page you were viewing when the record was built.
Product name and price
"salePrice":30,"currency":"THB","marketplace":"bigc"
The listing's title and the price shown to you, plus the marketplace it came from.
Product ID and image
"oid":"704","featuredImage":"https://st.bigc-cs.com/cdn-cgi/image/format=webp,quality=90/public/media/catalog/product/18/88/8851959143018/8851959143018_2-20260604145417-.jpg"
The marketplace's own product/order ID and the listing's photo, which together identify the exact item.

The code that does this

From page load to the two uploads

Readable version

Show shipped source

Content script: reads the product record and posts it, five seconds after load

assets/chunk-CpHppWqp.js

setTimeout(async () => {  const product = pageHandler.getProductDetailInfo();  product.collector.id = COLLECTOR_ID;  product.collector.type = COLLECTOR_ID;  product.collector.version = EXT_VERSION;  api.post(config.INGESTER_API_URL + "/ingester/products", [product])    .then(() => {})    .catch((err) => console.log("post product error", err.response));  const db = await openDB("linga", 2, {    upgrade(db) {      db.createObjectStore("products", { keyPath: "oid" });    },  });  const exists = await db.count("products", product.oid);  const write = exists ? db.put("products", product) : db.add("products", product);  await write    .then(() => console.debug("add product success", product))    .catch((err) => console.log("could not add product", err));}, 5000);

Service worker: polls open Taobao/1688 tabs, then relays their stored products to the second host

assets/chunk-P3kOYg8s.js

// First poll 19s after the service worker starts, then every 30 minutessetTimeout(() => pollOpenProductTabs("GET_PRODUCT_FROM_DB", {}), 19000);setInterval(() => pollOpenProductTabs("GET_PRODUCT_FROM_DB", {}), THIRTY_MINUTES_MS);chrome.runtime.onMessage.addListener((message, sender) => {  (async () => {    if (message.type === "SEND_PRODUCT_TO_BLACK_HOLE") {      const ionBody = ionEncode(JSON.stringify(message.payload));      const url = config.BLACK_HOLE_API_URL + "/api/v1/products";      const res = await fetch(url, {        method: "POST",        body: ionWriteBytes(ionBody),        headers: { "Content-Type": "application/ion" },      });      if (res.ok) {        // Delete the local copy now that it's been uploaded        chrome.tabs.sendMessage(sender.tab.id, { type: "DELETE_PRODUCT_FROM_DB", payload: message.payload });      } else {        console.log("send to black hole failed", res.statusText);      }    }  })();  return true;});

The two destination hosts, defined together as extension-wide config constants

assets/chunk-Bvaftwo7.js

const config = {  API_URL: "https://api.mygobiz.net",  SU_API_URL: "https://cashback.gobiz.dev",  JUSTICE_API_URL: "https://api-justice.gobiz.dev/api",  INGESTER_API_URL: "https://cashback.gobiz.dev",  BLACK_HOLE_API_URL: "https://blackhole.sabomall.com",};export { config as A };

When this fires

Every 30 minutes

The initial upload fires about five seconds after a supported product page finishes loading. Independently, the background service worker starts polling for anything left in local storage 19 seconds after the browser starts, then repeats that poll every 30 minutes for as long as the browser runs.

Where the data goes

- cashback.gobiz.dev
Receives the product record from the content script within seconds of opening a supported page; also serves as the affiliate/cashback API under the same host (SU_API_URL).
- blackhole.sabomall.com
Receives the same product records again, later and in bulk, via an Ion-encoded upload from the background service worker's periodic poll of your open Taobao/1688 tabs.

Shopping links on any page get replaced with affiliate-tagged redirects

Runs on every website, scanning links each second for Taobao/Tmall/1688/Yangkeduo patterns, sending matches to cashback.gobiz.dev/public/kui/shorten/generate_batch, then rewriting them; one reply carried the operator's own affiliate ID.

Severity: Medium unwanted
Type: Unexpected
CWE: CWE-359
Source: Dynamic sandbox

What actually happens

You did this

The user loads any web page containing a link to a Taobao, Tmall, 1688, or Yangkeduo product.

This runs on every site, not only the shopping marketplaces the extension is meant to help with ordering, the page in this capture was the ordinary taobao.com homepage, not a checkout flow.

The extension did this

The extension sends the link's raw URL to its own API and replaces the link's target with an affiliate-tagged redirect.

The response routes a later click through Taobao's global affiliate program, crediting the resulting sale to the extension's own affiliate account.

Captured request

POSThttps://cashback.gobiz.dev/public/kui/shorten/generate_batch

200 OK, streamed as server-sent events, one per requestId. Most entries returned url:null (no coupon/affiliate match for that product), but at least one returned a Taobao global-affiliate redirect URL carrying the extension operator's own affiliate partner ID, see the DOM-rewrite block below for that exact pair.

Headers

Referer: https://www.taobao.com/
X-Tenant: shippo-cb
Content-Type: application/json

Body

[  {    "requestId": "1874_1786927074762",    "rawUrl": "https://item.taobao.com/item.htm?id=1065369425549&scm=1007.40986.420852.528214_527807_537217_521582_526067_533297_528938_530923_532805_528109_545020_537488_546628_537987_547837_538037&pvid=919b6c97-a2e1-46e9-94d1-b349b8cbfc17&xxc=home_recommend&skuId=6112807541078&mi_id=XDvOK02RVSlGGirIUSqsU79TJqC2VKO3ghm10XWXlgEeupF9zcu_TgqFrPK_lKObpQXIEjPQi98qH7tIoZMfCA&utparam=%7B%22abid%22%3A%22528214_527807_537217_521582_526067_533297_528938_530923_532805_528109_545020_537488_546628_537987_547837_538037%22%2C%22item_ctr%22%3A0%2C%22x_object_type%22%3A%22item%22%2C%22pc_pvid%22%3A%22919b6c97-a2e1-46e9-94d1-b349b8cbfc17%22%2C%22item_cvr%22%3A0%2C%22mix_group%22%3A%22%22%2C%22pc_scene%22%3A%2220001%22%2C%22item_ecpm%22%3A0%2C%22aplus_abtest%22%3A%22ba491a1b71774b8fcadac80e471e2b59%22%2C%22tpp_buckets%22%3A%2230986%23420852%23module%22%2C%22x_object_id%22%3A1065369425549%2C%22ab_info%22%3A%2230986%23420852%23-1%23%22%7D&"  },  {    "requestId": "1875_1786927074762",    "rawUrl": "https://item.taobao.com/item.htm?id=1066336730820&scm=1007.40986.420852.528214_527807_537217_521582_526067_533297_528938_530923_532805_528109_545020_537488_546628_537987_547837_538037&pvid=919b6c97-a2e1-46e9-94d1-b349b8cbfc17&xxc=home_recommend&skuId=6280053251464&mi_id=By2odB30ocXtPLSmUTH5OBoShwqSOQcZWgVoFMxYR1KtM4zmOePrRjPWT4axQMZYN248DI6l_zgDVcrSTzFFHA&utparam=%7B%22abid%22%3A%22528214_527807_537217_521582_526067_533297_528938_530923_532805_528109_545020_537488_546628_537987_547837_538037%22%2C%22item_ctr%22%3A0%2C%22x_object_type%22%3A%22item%22%2C%22pc_pvid%22%3A%22919b6c97-a2e1-46e9-94d1-b349b8cbfc17%22%2C%22item_cvr%22%3A0%2C%22mix_group%22%3A%22%22%2C%22pc_scene%22%3A%2220001%22%2C%22item_ecpm%22%3A0%2C%22aplus_abtest%22%3A%224cd8037c288903e25308d96e88e5a62f%22%2C%22tpp_buckets%22%3A%2230986%23420852%23module%22%2C%22x_object_id%22%3A1066336730820%2C%22ab_info%22%3A%2230986%23420852%23-1%23%22%7D&"  },  {    "requestId": "1876_1786927074762",    "rawUrl": "https://item.taobao.com/item.htm?id=1038045933090&scm=1007.40986.420852.528214_527807_537217_521582_526067_533297_528938_530923_532805_528109_545020_537488_546628_537987_547837_538037&pvid=919b6c97-a2e1-46e9-94d1-b349b8cbfc17&xxc=home_recommend&skuId=6054555920783&mi_id=Fg-rarpDOly3p1ptYt-GF12VbX7o5p7cjdoWcSZDMe5rMYiWxutdkzGMsbxzNml-4EuEkgQZfDeAUC1LAkXRQA&utparam=%7B%22abid%22%3A%22528214_527807_537217_521582_526067_533297_528938_530923_532805_528109_545020_537488_546628_537987_547837_538037%22%2C%22item_ctr%22%3A0%2C%22x_object_type%22%3A%22item%22%2C%22pc_pvid%22%3A%22919b6c97-a2e1-46e9-94d1-b349b8cbfc17%22%2C%22item_cvr%22%3A0%2C%22mix_group%22%3A%22%22%2C%22pc_scene%22%3A%2220001%22%2C%22item_ecpm%22%3A0%2C%22aplus_abtest%22%3A%220f0fff773646381fe8fb9d016a28dd2d%22%2C%22tpp_buckets%22%3A%2230986%23420852%23module%22%2C%22x_object_id%22%3A1038045933090%2C%22ab_info%22%3A%2230986%23420852%23-1%23%22%7D&"  },  {    "requestId": "1877_1786927074762",    "rawUrl": "https://item.taobao.com/item.htm?id=862641480439&scm=1007.40986.420852.528214_527807_537217_521582_526067_533297_528938_530923_532805_528109_545020_537488_546628_537987_547837_538037&pvid=919b6c97-a2e1-46e9-94d1-b349b8cbfc17&xxc=home_recommend&skuId=5683176929185&mi_id=_VQDjPjUZVBfFceQncsn5LkawdZnSA1t3r7Nyl1kNZnw5XdHirCNdnF2EaIdv4Ytmc67JM464iSUK4rypTcdww&utparam=%7B%22abid%22%3A%22528214_527807_537217_521582_526067_533297_528938_530923_532805_528109_545020_537488_546628_537987_547837_538037%22%2C%22item_ctr%22%3A0%2C%22x_object_type%22%3A%22item%22%2C%22pc_pvid%22%3A%22919b6c97-a2e1-46e9-94d1-b349b8cbfc17%22%2C%22item_cvr%22%3A0%2C%22mix_group%22%3A%22%22%2C%22pc_scene%22%3A%2220001%22%2C%22item_ecpm%22%3A0%2C%22aplus_abtest%22%3A%22cac7eb04077d3e8bb217a5eafc38d3ae%22%2C%22tpp_buckets%22%3A%2230986%23420852%23module%22%2C%22x_object_id%22%3A862641480439%2C%22ab_info%22%3A%2230986%23420852%23-1%23%22%7D&"  },  {    "requestId": "1878_1786927074762",    "rawUrl": "https://item.taobao.com/item.htm?id=992623594929&scm=1007.40986.420852.528214_527807_537217_521582_526067_533297_528938_530923_532805_528109_545020_537488_546628_537987_547837_538037&pvid=919b6c97-a2e1-46e9-94d1-b349b8cbfc17&xxc=home_recommend&skuId=6133558547841&mi_id=j3BmVC1JWQcQg4Tc8a2_ZiD4TYrMlsKDgIWfViOcH2-W4gUuaIZpWb4E6BRpp7zqarmHey_opatwQ1RNeW8m3A&utparam=%7B%22abid%22%3A%22528214_527807_537217_521582_526067_533297_528938_530923_532805_528109_545020_537488_546628_537987_547837_538037%22%2C%22item_ctr%22%3A0%2C%22x_object_type%22%3A%22item%22%2C%22pc_pvid%22%3A%22919b6c97-a2e1-46e9-94d1-b349b8cbfc17%22%2C%22item_cvr%22%3A0%2C%22mix_group%22%3A%22%22%2C%22pc_scene%22%3A%2220001%22%2C%22item_ecpm%22%3A0%2C%22aplus_abtest%22%3A%22d46bb1bd833df57d27c8d4373b911568%22%2C%22tpp_buckets%22%3A%2230986%23420852%23module%22%2C%22x_object_id%22%3A992623594929%2C%22ab_info%22%3A%2230986%23420852%23-1%23%22%7D&"  },  {    "requestId": "1879_1786927074763",    "rawUrl": "https://item.taobao.com/item.htm?id=768582214885&scm=1007.40986.420852.528214_527807_537217_521582_526067_533297_528938_530923_532805_528109_545020_537488_546628_537987_547837_538037&pvid=919b6c97-a2e1-46e9-94d1-b349b8cbfc17&xxc=home_recommend&skuId=5271402912500&mi_id=dFP9sEzNJP25SLz8yqM-iDShcxts5Zu5KDPeImqkBMUXbZgvHDFxcpocN4M-DrEn5Zm-yiW72NYX99gfWNzJ5g&utparam=%7B%22abid%22%3A%22528214_527807_537217_521582_526067_533297_528938_530923_532805_528109_545020_537488_546628_537987_547837_538037%22%2C%22item_ctr%22%3A0%2C%22x_object_type%22%3A%22item%22%2C%22pc_pvid%22%3A%22919b6c97-a2e1-46e9-94d1-b349b8cbfc17%22%2C%22item_cvr%22%3A0%2C%22mix_group%22%3A%22%22%2C%22pc_scene%22%3A%2220001%22%2C%22item_ecpm%22%3A0%2C%22aplus_abtest%22%3A%2224d0b81f09559e8db8c0f84c560649c6%22%2C%22tpp_buckets%22%3A%2230986%23420852%23module%22%2C%22x_object_id%22%3A768582214885%2C%22ab_info%22%3A%2230986%23420852%23-1%23%22%7D&"  },  {    "requestId": "1880_1786927074763",    "rawUrl": "https://item.taobao.com/item.htm?id=1073284349496&scm=1007.40986.420852.528214_527807_537217_521582_526067_533297_528938_530923_532805_528109_545020_537488_546628_537987_547837_538037&pvid=919b6c97-a2e1-46e9-94d1-b349b8cbfc17&xxc=home_recommend&skuId=6287457854912&mi_id=XW_Ff0k0ungH8fSHOgT8Y4chV2dK67BIJ2yJtdcy1krZu7ZXceDK_fhfEk9BzNMLG9CokxhtA1GdQ6d0I0yjHA&utparam=%7B%22abid%22%3A%22528214_527807_537217_521582_526067_533297_528938_530923_532805_528109_545020_537488_546628_537987_547837_538037%22%2C%22item_ctr%22%3A0%2C%22x_object_type%22%3A%22item%22%2C%22pc_pvid%22%3A%22919b6c97-a2e1-46e9-94d1-b349b8cbfc17%22%2C%22item_cvr%22%3A0%2C%22mix_group%22%3A%22%22%2C%22pc_scene%22%3A%2220001%22%2C%22item_ecpm%22%3A0%2C%22aplus_abtest%22%3A%22e73c45cc80c89ea4217e289cca1757c8%22%2C%22tpp_buckets%22%3A%2230986%23420852%23module%22%2C%22x_object_id%22%3A1073284349496%2C%22ab_info%22%3A%2230986%23420852%23-1%23%22%7D&"  },  {    "requestId": "1881_1786927074763",    "rawUrl": "https://item.taobao.com/item.htm?id=731202282639&scm=1007.40986.420852.528214_527807_537217_521582_526067_533297_528938_530923_532805_528109_545020_537488_546628_537987_547837_538037&pvid=919b6c97-a2e1-46e9-94d1-b349b8cbfc17&xxc=home_recommend&skuId=5716705345143&mi_id=hSabN5RjcRX7rW-tSUtAkXC6PT4Vck1oH1PaBRLU1PxkWlXg1KSBwAW-6AnWqpXfR5n0Or9ihNVo_IWyVmzbVg&utparam=%7B%22abid%22%3A%22528214_527807_537217_521582_526067_533297_528938_530923_532805_528109_545020_537488_546628_537987_547837_538037%22%2C%22item_ctr%22%3A0%2C%22x_object_type%22%3A%22item%22%2C%22pc_pvid%22%3A%22919b6c97-a2e1-46e9-94d1-b349b8cbfc17%22%2C%22item_cvr%22%3A0%2C%22mix_group%22%3A%22%22%2C%22pc_scene%22%3A%2220001%22%2C%22item_ecpm%22%3A0%2C%22aplus_abtest%22%3A%2273af7bf7506275a0f100622c11af0452%22%2C%22tpp_buckets%22%3A%2230986%23420852%23module%22%2C%22x_object_id%22%3A731202282639%2C%22ab_info%22%3A%2230986%23420852%23-1%23%22%7D&"  },  {    "requestId": "1882_1786927074763",    "rawUrl": "https://item.taobao.com/item.htm?id=906506632029&scm=1007.40986.420852.528214_527807_537217_521582_526067_533297_528938_530923_532805_528109_545020_537488_546628_537987_547837_538037&pvid=919b6c97-a2e1-46e9-94d1-b349b8cbfc17&xxc=home_recommend&skuId=6169178407577&mi_id=ddI85X1NjxI5f-WHEbuAesCX9OnmRIL9SVcF67uoJkamJZmtcw-7hPLXM7ckACY5cvDofVtfQ5t-_rHps3JUgA&utparam=%7B%22abid%22%3A%22528214_527807_537217_521582_526067_533297_528938_530923_532805_528109_545020_537488_546628_537987_547837_538037%22%2C%22item_ctr%22%3A0%2C%22x_object_type%22%3A%22item%22%2C%22pc_pvid%22%3A%22919b6c97-a2e1-46e9-94d1-b349b8cbfc17%22%2C%22item_cvr%22%3A0%2C%22mix_group%22%3A%22%22%2C%22pc_scene%22%3A%2220001%22%2C%22item_ecpm%22%3A0%2C%22aplus_abtest%22%3A%229922207d5f918f09d421e59b4e964fb1%22%2C%22tpp_buckets%22%3A%2230986%23420852%23module%22%2C%22x_object_id%22%3A906506632029%2C%22ab_info%22%3A%2230986%23420852%23-1%23%22%7D&"  },  {    "requestId": "1883_1786927074763",    "rawUrl": "https://item.taobao.com/item.htm?id=944221131515&scm=1007.40986.420852.528214_527807_537217_521582_526067_533297_528938_530923_532805_528109_545020_537488_546628_537987_547837_538037&pvid=919b6c97-a2e1-46e9-94d1-b349b8cbfc17&xxc=home_recommend&skuId=5848424692660&mi_id=xzvgd9oaklFO3lKHYHZAHslIMBAUFOoKxDchVNR8-cIKR9jUdYYXzFupZWfdAmad7zDhwqbJA2xXh8qu1dQn4Q&utparam=%7B%22abid%22%3A%22528214_527807_537217_521582_526067_533297_528938_530923_532805_528109_545020_537488_546628_537987_547837_538037%22%2C%22item_ctr%22%3A0%2C%22x_object_type%22%3A%22item%22%2C%22pc_pvid%22%3A%22919b6c97-a2e1-46e9-94d1-b349b8cbfc17%22%2C%22item_cvr%22%3A0%2C%22mix_group%22%3A%22%22%2C%22pc_scene%22%3A%2220001%22%2C%22item_ecpm%22%3A0%2C%22aplus_abtest%22%3A%22a44e55a6401ae8f54a2ac56ae0400024%22%2C%22tpp_buckets%22%3A%2230986%23420852%23module%22%2C%22x_object_id%22%3A944221131515%2C%22ab_info%22%3A%2230986%23420852%23-1%23%22%7D&"  },  {    "requestId": "1884_1786927074763",    "rawUrl": "https://item.taobao.com/item.htm?id=27006244041&scm=1007.40986.420852.528214_527807_537217_521582_526067_533297_528938_530923_532805_528109_545020_537488_546628_537987_547837_538037&pvid=919b6c97-a2e1-46e9-94d1-b349b8cbfc17&xxc=home_recommend&skuId=5717401652086&mi_id=HkjOgHcHLSMxomm_IFFLjoXui7J7XE81TDDr7_NF5jbSp3dqz3OwKKv-ZwNGcCLjL15HrS4H38GFn_f0psZc3g&utparam=%7B%22abid%22%3A%22528214_527807_537217_521582_526067_533297_528938_530923_532805_528109_545020_537488_546628_537987_547837_538037%22%2C%22item_ctr%22%3A0%2C%22x_object_type%22%3A%22item%22%2C%22pc_pvid%22%3A%22919b6c97-a2e1-46e9-94d1-b349b8cbfc17%22%2C%22item_cvr%22%3A0%2C%22mix_group%22%3A%22%22%2C%22pc_scene%22%3A%2220001%22%2C%22item_ecpm%22%3A0%2C%22aplus_abtest%22%3A%2264fa7b2e86b5386836de53510d45b4e7%22%2C%22tpp_buckets%22%3A%2230986%23420852%23module%22%2C%22x_object_id%22%3A27006244041%2C%22ab_info%22%3A%2230986%23420852%23-1%23%22%7D&"  },  {    "requestId": "1885_1786927074763",    "rawUrl": "https://item.taobao.com/item.htm?id=1028959964524&scm=1007.40986.420852.528214_527807_537217_521582_526067_533297_528938_530923_532805_528109_545020_537488_546628_537987_547837_538037&pvid=919b6c97-a2e1-46e9-94d1-b349b8cbfc17&xxc=home_recommend&skuId=6115514581140&mi_id=6tvpL_Rg_ei6Ws9d06QiCz7U7aOaWc8LgFj8mFUOZtVH5Ksaa26w2ZxgRlUQVj2LPbjmLEAsnyhkXV8y0K1bQg&utparam=%7B%22abid%22%3A%22528214_527807_537217_521582_526067_533297_528938_530923_532805_528109_545020_537488_546628_537987_547837_538037%22%2C%22item_ctr%22%3A0%2C%22x_object_type%22%3A%22item%22%2C%22pc_pvid%22%3A%22919b6c97-a2e1-46e9-94d1-b349b8cbfc17%22%2C%22item_cvr%22%3A0%2C%22mix_group%22%3A%22%22%2C%22pc_scene%22%3A%2220001%22%2C%22item_ecpm%22%3A0%2C%22aplus_abtest%22%3A%22a99adc24c1ef0e598aa1490090684885%22%2C%22tpp_buckets%22%3A%2230986%23420852%23module%22%2C%22x_object_id%22%3A1028959964524%2C%22ab_info%22%3A%2230986%23420852%23-1%23%22%7D&"  },  {    "requestId": "1886_1786927074763",    "rawUrl": "https://item.taobao.com/item.htm?id=1002279316216&scm=1007.40986.420852.528214_527807_537217_521582_526067_533297_528938_530923_532805_528109_545020_537488_546628_537987_547837_538037&pvid=919b6c97-a2e1-46e9-94d1-b349b8cbfc17&xxc=home_recommend&skuId=5989331957338&mi_id=8-TRIbkC-y8rOYtyqq8sgFx-Zn1uSzaKNMTctpKvDn6_LzWgoXjftuaVrJ26AAh_HzEXCSEIhj61rx-_uWfCwQ&utparam=%7B%22abid%22%3A%22528214_527807_537217_521582_526067_533297_528938_530923_532805_528109_545020_537488_546628_537987_547837_538037%22%2C%22item_ctr%22%3A0%2C%22x_object_type%22%3A%22item%22%2C%22pc_pvid%22%3A%22919b6c97-a2e1-46e9-94d1-b349b8cbfc17%22%2C%22item_cvr%22%3A0%2C%22mix_group%22%3A%22%22%2C%22pc_scene%22%3A%2220001%22%2C%22item_ecpm%22%3A0%2C%22aplus_abtest%22%3A%22d4e7644db24fa65d364fd8a36acdeca2%22%2C%22tpp_buckets%22%3A%2230986%23420852%23module%22%2C%22x_object_id%22%3A1002279316216%2C%22ab_info%22%3A%2230986%23420852%23-1%23%22%7D&"  },  {    "requestId": "1887_1786927074763",    "rawUrl": "https://item.taobao.com/item.htm?id=839171867223&scm=1007.40986.420852.528214_527807_537217_521582_526067_533297_528938_530923_532805_528109_545020_537488_546628_537987_547837_538037&pvid=919b6c97-a2e1-46e9-94d1-b349b8cbfc17&xxc=home_recommend&skuId=5929315427542&mi_id=T1ZDJkD9DA7yOIufxzWTepzQ9uMQYpFUZUuXjVfXD1tNlIcdaLJZOofpKfeyDyaXhx4vO6FxgvAsHQFfU47lLQ&utparam=%7B%22abid%22%3A%22528214_527807_537217_521582_526067_533297_528938_530923_532805_528109_545020_537488_546628_537987_547837_538037%22%2C%22item_ctr%22%3A0%2C%22x_object_type%22%3A%22item%22%2C%22pc_pvid%22%3A%22919b6c97-a2e1-46e9-94d1-b349b8cbfc17%22%2C%22item_cvr%22%3A0%2C%22mix_group%22%3A%22%22%2C%22pc_scene%22%3A%2220001%22%2C%22item_ecpm%22%3A0%2C%22aplus_abtest%22%3A%2264c4d86234551ff19cf38ace7a6065e7%22%2C%22tpp_buckets%22%3A%2230986%23420852%23module%22%2C%22x_object_id%22%3A839171867223%2C%22ab_info%22%3A%2230986%23420852%23-1%23%22%7D&"  },  {    "requestId": "1888_1786927074763",    "rawUrl": "https://item.taobao.com/item.htm?id=1046499986572&scm=1007.40986.420852.528214_527807_537217_521582_526067_533297_528938_530923_532805_528109_545020_537488_546628_537987_547837_538037&pvid=919b6c97-a2e1-46e9-94d1-b349b8cbfc17&xxc=home_recommend&skuId=6073782465669&mi_id=LfbReq1BqpA6st2Y5vj_1ERQrnL_FzO68KmKQWpcPFd9LL5yxuaqFmU_OYZr4daWbhZVB3DBloyOXVYmErbLiw&utparam=%7B%22abid%22%3A%22528214_527807_537217_521582_526067_533297_528938_530923_532805_528109_545020_537488_546628_537987_547837_538037%22%2C%22item_ctr%22%3A0%2C%22x_object_type%22%3A%22item%22%2C%22pc_pvid%22%3A%22919b6c97-a2e1-46e9-94d1-b349b8cbfc17%22%2C%22item_cvr%22%3A0%2C%22mix_group%22%3A%22%22%2C%22pc_scene%22%3A%2220001%22%2C%22item_ecpm%22%3A0%2C%22aplus_abtest%22%3A%227e7a2a0556d0cd329218f72fdb303b75%22%2C%22tpp_buckets%22%3A%2230986%23420852%23module%22%2C%22x_object_id%22%3A1046499986572%2C%22ab_info%22%3A%2230986%23420852%23-1%23%22%7D&"  },  {    "requestId": "1889_1786927074763",    "rawUrl": "https://item.taobao.com/item.htm?id=1071681455350&scm=1007.40986.420852.528214_527807_537217_521582_526067_533297_528938_530923_532805_528109_545020_537488_546628_537987_547837_538037&pvid=919b6c97-a2e1-46e9-94d1-b349b8cbfc17&xxc=home_recommend&skuId=6288127391568&mi_id=qJeZ7LP-dYlgK7-wHdsxA7KAeQf36gbFYtJeIHS11tyoV3f7I_izRGTyIKa9bcvUZ7TuNKKxvt-o1RmD9U5-jw&utparam=%7B%22abid%22%3A%22528214_527807_537217_521582_526067_533297_528938_530923_532805_528109_545020_537488_546628_537987_547837_538037%22%2C%22item_ctr%22%3A0%2C%22x_object_type%22%3A%22item%22%2C%22pc_pvid%22%3A%22919b6c97-a2e1-46e9-94d1-b349b8cbfc17%22%2C%22item_cvr%22%3A0%2C%22mix_group%22%3A%22%22%2C%22pc_scene%22%3A%2220001%22%2C%22item_ecpm%22%3A0%2C%22aplus_abtest%22%3A%2202dbcbc159b43d995d6b03b6bfcf9668%22%2C%22tpp_buckets%22%3A%2230986%23420852%23module%22%2C%22x_object_id%22%3A1071681455350%2C%22ab_info%22%3A%2230986%23420852%23-1%23%22%7D&"  },  {    "requestId": "1890_1786927074763",    "rawUrl": "https://item.taobao.com/item.htm?id=1073398292932&scm=1007.40986.420852.528214_527807_537217_521582_526067_533297_528938_530923_532805_528109_545020_537488_546628_537987_547837_538037&pvid=919b6c97-a2e1-46e9-94d1-b349b8cbfc17&xxc=home_recommend&skuId=6286694815389&mi_id=XW_Ff0k0ungH8fSHOgT8Y2v-qyj3fLGUbHCv9dZdLlOglJ6CNQGbpYbOfOU34LgVjLpRfUT1RDidGc_j6fMwDw&utparam=%7B%22abid%22%3A%22528214_527807_537217_521582_526067_533297_528938_530923_532805_528109_545020_537488_546628_537987_547837_538037%22%2C%22item_ctr%22%3A0%2C%22x_object_type%22%3A%22item%22%2C%22pc_pvid%22%3A%22919b6c97-a2e1-46e9-94d1-b349b8cbfc17%22%2C%22item_cvr%22%3A0%2C%22mix_group%22%3A%22%22%2C%22pc_scene%22%3A%2220001%22%2C%22item_ecpm%22%3A0%2C%22aplus_abtest%22%3A%22a824a57e87dfd0fd21f84ece45bb1c45%22%2C%22tpp_buckets%22%3A%2230986%23420852%23module%22%2C%22x_object_id%22%3A1073398292932%2C%22ab_info%22%3A%2230986%23420852%23-1%23%22%7D&"  },  {    "requestId": "1891_1786927074763",    "rawUrl": "https://item.taobao.com/item.htm?id=1043676625215&scm=1007.40986.420852.528214_527807_537217_521582_526067_533297_528938_530923_532805_528109_545020_537488_546628_537987_547837_538037&pvid=919b6c97-a2e1-46e9-94d1-b349b8cbfc17&xxc=home_recommend&skuId=6235700671066&mi_id=_OGYrl6bb7NNiNtBPmR1L_kqPFPVTF836oIaXsBWRPM_lS1lEBgqwi5LQuj2XWoj-LEC7K2tpSBq8KHuxBX82A&utparam=%7B%22abid%22%3A%22528214_527807_537217_521582_526067_533297_528938_530923_532805_528109_545020_537488_546628_537987_547837_538037%22%2C%22item_ctr%22%3A0%2C%22x_object_type%22%3A%22item%22%2C%22pc_pvid%22%3A%22919b6c97-a2e1-46e9-94d1-b349b8cbfc17%22%2C%22item_cvr%22%3A0%2C%22mix_group%22%3A%22%22%2C%22pc_scene%22%3A%2220001%22%2C%22item_ecpm%22%3A0%2C%22aplus_abtest%22%3A%225f8933a58ea05aa8d6e85a50659f2c76%22%2C%22tpp_buckets%22%3A%2230986%23420852%23module%22%2C%22x_object_id%22%3A1043676625215%2C%22ab_info%22%3A%2230986%23420852%23-1%23%22%7D&"  },  {    "requestId": "1892_1786927074763",    "rawUrl": "https://item.taobao.com/item.htm?id=1056822364806&scm=1007.40986.420852.528214_527807_537217_521582_526067_533297_528938_530923_532805_528109_545020_537488_546628_537987_547837_538037&pvid=919b6c97-a2e1-46e9-94d1-b349b8cbfc17&xxc=home_recommend&skuId=6261309631205&mi_id=bw2iBWerMQdf5nPqOG6HMrwajZkCZHbXgviSHuiGg_ey4TWkzk1jOO-c8HQDhMKgonB7VdTKJgQmrhYLpLiiEw&utparam=%7B%22abid%22%3A%22528214_527807_537217_521582_526067_533297_528938_530923_532805_528109_545020_537488_546628_537987_547837_538037%22%2C%22item_ctr%22%3A0%2C%22x_object_type%22%3A%22item%22%2C%22pc_pvid%22%3A%22919b6c97-a2e1-46e9-94d1-b349b8cbfc17%22%2C%22item_cvr%22%3A0%2C%22mix_group%22%3A%22%22%2C%22pc_scene%22%3A%2220001%22%2C%22item_ecpm%22%3A0%2C%22aplus_abtest%22%3A%22a39318b7f004b235690d6d25bcdf3e36%22%2C%22tpp_buckets%22%3A%2230986%23420852%23module%22%2C%22x_object_id%22%3A1056822364806%2C%22ab_info%22%3A%2230986%23420852%23-1%23%22%7D&"  },  {    "requestId": "1893_1786927074763",    "rawUrl": "https://item.taobao.com/item.htm?id=1056408305455&scm=1007.40986.420852.528214_527807_537217_521582_526067_533297_528938_530923_532805_528109_545020_537488_546628_537987_547837_538037&pvid=919b6c97-a2e1-46e9-94d1-b349b8cbfc17&xxc=home_recommend&mi_id=bw2iBWerMQdf5nPqOG6HMrL0EO21F4LgIkvfF3Q6LbID3prvWZe1E9uN3ueF7ES4Sozrb5u_AiUTuKmNvPAelQ&utparam=%7B%22abid%22%3A%22528214_527807_537217_521582_526067_533297_528938_530923_532805_528109_545020_537488_546628_537987_547837_538037%22%2C%22item_ctr%22%3A0%2C%22x_object_type%22%3A%22item%22%2C%22pc_pvid%22%3A%22919b6c97-a2e1-46e9-94d1-b349b8cbfc17%22%2C%22item_cvr%22%3A0%2C%22mix_group%22%3A%22%22%2C%22pc_scene%22%3A%2220001%22%2C%22item_ecpm%22%3A0%2C%22aplus_abtest%22%3A%225d7366d03654177bb1918e50c244693e%22%2C%22tpp_buckets%22%3A%2230986%23420852%23module%22%2C%22x_object_id%22%3A1056408305455%2C%22ab_info%22%3A%2230986%23420852%23-1%23%22%7D&"  }]

Fields in the request and the response

Product link on the page
https://item.taobao.com/item.htm?id=906506632029&skuId=6169178407577&...
The exact href of a Taobao/Tmall/1688/Yangkeduo link found anywhere on the page you're viewing, sent as-is.
Affiliate tenant header
X-Tenant: shippo-cb
Identifies which affiliate program account the request is being made on behalf of.
Returned affiliate redirect
https://intl.taobao.com/dp?h5Url=...%26pid%3Dmm_26632943_457000242_108858100157%26...
The URL the extension puts in place of the original link, carrying the operator's own affiliate partner ID.

Page DOM modified

The extension replaces the page's own link to this product with a Taobao global-affiliate redirect for the same item (itemId=906506632029), carrying the extension operator's affiliate partner ID (pid=mm_26632943_457000242_108858100157) and a relationId, so a click that used to go straight to the listing now attributes the resulting sale to the extension's own affiliate account.

Target: A Taobao product link on the page, matched by the extension's scanner

Before

<a href="https://item.taobao.com/item.htm?id=906506632029&scm=1007.40986.420852.528214_527807_537217_521582_526067_533297_528938_530923_532805_528109_545020_537488_546628_537987_547837_538037&pvid=919b6c97-a2e1-46e9-94d1-b349b8cbfc17&xxc=home_recommend&skuId=6169178407577&mi_id=ddI85X1NjxI5f-WHEbuAesCX9OnmRIL9SVcF67uoJkamJZmtcw-7hPLXM7ckACY5cvDofVtfQ5t-_rHps3JUgA&utparam=%7B%22abid%22%3A%22528214_527807_537217_521582_526067_533297_528938_530923_532805_528109_545020_537488_546628_537987_547837_538037%22%2C%22item_ctr%22%3A0%2C%22x_object_type%22%3A%22item%22%2C%22pc_pvid%22%3A%22919b6c97-a2e1-46e9-94d1-b349b8cbfc17%22%2C%22item_cvr%22%3A0%2C%22mix_group%22%3A%22%22%2C%22pc_scene%22%3A%2220001%22%2C%22item_ecpm%22%3A0%2C%22aplus_abtest%22%3A%229922207d5f918f09d421e59b4e964fb1%22%2C%22tpp_buckets%22%3A%2230986%23420852%23module%22%2C%22x_object_id%22%3A906506632029%2C%22ab_info%22%3A%2230986%23420852%23-1%23%22%7D&">product</a>

After the extension changed it

<a href="https://intl.taobao.com/dp?h5Url=https%3A%2F%2Fworld.taobao.com%2Fwow%2Fz%2Foversea%2Fgam%2Fovs-affiliate-pdp%3FitemId%3D906506632029%26pid%3Dmm_26632943_457000242_108858100157%26relationId%3D2912053407%26traceId%3D1GR74F_GLOBAL_108858100157%26language%3Dzh_CN%26site%3DGLOBAL%26ovs_scene%3D61%40106394%26is_ovs_cpa%3D1%26ovs_cpa_scene%3Daffiliate_joint_attribution" marked="true">product</a>

The code that does this

From page load to the rewritten link

Readable version

Show shipped source

Matches any anchor on the page against product URL patterns

assets/chunk-Cz8uanDo.js

function isMatchedProductUrl(href) {  return (    href.match(/detail.tmall/) ||    href.match(/detail.tmall.hk/) ||    href.match(/tmall.com\/item\//) ||    href.match(/detail.liangxinyao.com/) ||    href.match(/item.taobao.com/) ||    href.match(/taobao.com\/item\//) ||    href.match(/.1688.com\/offer/) ||    href.match(/detail.1688/) ||    href.match(/mobile.yangkeduo.com/)  );}

Every second, scans all anchors, POSTs matches, and rewrites the href from the response

assets/chunk-Cz8uanDo.js

window.addEventListener("load", function () {  const currentUrl = window.location.href;  const isCheckoutPage =    currentUrl.match(/order.1688.com\/order\/smart_make_order.htm/) ||    currentUrl.match(/buy.tmall.com\/order\/confirm_order/) ||    currentUrl.match(/buy.tmall.hk\/order\/confirm_order/) ||    currentUrl.match(/buy.taobao.com\/auction\//);  if (isCheckoutPage) return;  setInterval(() => {    const anchors = document.getElementsByTagName("a");    const batch = [];    for (let i = 0; i < anchors.length; i++) {      const a = anchors[i];      if (isMatchedProductUrl(a.href) && !a.getAttribute("marked")) {        a.setAttribute("marked", "true");        a.id = `${i}_${new Date().getTime()}`;        batch.push({ requestId: a.id, rawUrl: a.href });      }    }    if (batch.length === 0) return;    const stream = new EventSource_(`${config.SU_API_URL}/public/kui/shorten/generate_batch`, {      headers: { "Content-Type": "application/json", "X-Tenant": "shippo-cb" },      payload: JSON.stringify(batch),      method: "POST",    });    stream.addEventListener("generate-batch-event", function (evt) {      const result = JSON.parse(evt.data);      if (result.url) {        const anchor = document.getElementById(result.requestId);        if (anchor) anchor.href = result.url.indexOf("https://") < 0 ? "https://" + result.url : result.url;      }    });    stream.stream();  }, 1000);});

Where the data goes

- cashback.gobiz.dev
Receives the raw href of every matching product link found on any page you visit, tagged with an X-Tenant: shippo-cb header, and returns the affiliate-tagged replacement URL.

What it can do

Permissions this extension asks for, as declared in version 6.1301.1628. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to. The current listed version is 7.0914.1643, which we have not unpacked yet.

Read and change your data on every site you visit
<all_urls>
Store data in your browser
storage
Run its own code inside the pages you visit
scripting
See every page you navigate to, as you navigate to it
webNavigation

Where it sends data

Destinations our analysis observed Công cụ đặt hàng của Order hàng Taobao contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

blackhole.sabomall.com
Công cụ đặt hàng của Order hàng Taobao sends data to blackhole.sabomall.com. One other extension we have analysed sends data here.
cashback.gobiz.dev
Công cụ đặt hàng của Order hàng Taobao sends data to cashback.gobiz.dev. No other extension we have analysed sends data here.