Is Extrabux-Cash Back, Rebates & Deals Assistant safe?
Extrabux-Cash Back, Rebates & Deals Assistant sends each visited page hostname to extension.extrabux.io with a device ID.
The content script runs on all websites and, after a page loads, sends the visited hostname to Extrabux's store lookup endpoint when that hostname is not already cached. The request goes to extension.extrabux.io/murphy/v1/stores and includes an Authrition header built from the extension's stored eb_device_id plus browser and extension metadata. The confirmed claim notes that full page paths are used locally for matching returned store URLs, while this lookup sends the hostname.
Who publishes itExtrabux, Inc - no other listings under this identity
Extrabux, Inc - no other listings under this identity
What this publisher told the store about itself, and the other listings that told it the same thing.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Where it sends data
Destinations our analysis observed Extrabux-Cash Back, Rebates & Deals Assistant contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- extension.extrabux.io
Extrabux-Cash Back, Rebates & Deals Assistant sends data to extension.extrabux.io. One other extension we have analysed sends data here.