Is Cross-border Product Collection safe?
Cross-border Product Collection scrapes Shopee product listings and forwards product data and page URLs to BigSeller's servers.
The extension runs on Shopee storefronts across Southeast Asia, intercepting product detail API responses and collecting listing data including URLs, prices, stock levels, and encoded API payloads. When a user triggers scraping, this data is POSTed to bigseller.com or bigseller.pro. The extension also sends page-view analytics including the user's BigSeller account ID and browser IP address to events.sellfox.com via Amplitude.
Who publishes itFairCloud Technology(HK) Limited - 3 other listings from the same operator, 1 of them carrying a finding
FairCloud Technology(HK) Limited - 3 other listings from the same operator, 1 of them carrying a finding
What this publisher told the store about itself, and the other listings that told it the same thing.
Same store account
3 other listings published from this account, 170k+ users between them. 1 of them carries a finding.
Shared hosts - 3 hostnames
Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Where it sends data
Destinations our analysis observed Cross-border Product Collection contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- events.sellfox.com
Cross-border Product Collection sends data to events.sellfox.com. 3 other extensions we have analyzed send data here.
- bigseller.pro
Cross-border Product Collection sends data to bigseller.pro. One other extension we have analyzed sends data here.
- www.bigseller.com
Cross-border Product Collection sends data to www.bigseller.com. One other extension we have analyzed sends data here.