Is FatCoupon Cashback & Promo Codes safe?

FatCoupon Cashback & Promo Codes transmits the full URL of every page visited to its servers and fetches remotely-controlled code that executes in the context of web pages.

On each navigation, the extension sends the complete URL — including path and query string — to service.fatcoupon.com to check store eligibility, with results cached per hostname for 30 minutes. The extension also fetches store connector scripts from FatCoupon-controlled CDN buckets (CloudFront and S3) and evaluates them via eval() and an interpreted JavaScript engine inside content scripts, with no integrity verification. A compromise of those CDN resources would allow arbitrary code execution in the content script context across any site the extension runs on.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.