Is FatCoupon Cashback & Promo Codes safe?
FatCoupon Cashback & Promo Codes transmits the full URL of every page visited to its servers and fetches remotely-controlled code that executes in the context of web pages.
On each navigation, the extension sends the complete URL — including path and query string — to service.fatcoupon.com to check store eligibility, with results cached per hostname for 30 minutes. The extension also fetches store connector scripts from FatCoupon-controlled CDN buckets (CloudFront and S3) and evaluates them via eval() and an interpreted JavaScript engine inside content scripts, with no integrity verification. A compromise of those CDN resources would allow arbitrary code execution in the content script context across any site the extension runs on.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
Who publishes ithttps://www.fatcoupon.com - no other listings under this identity
https://www.fatcoupon.com - no other listings under this identity
What this publisher told the store about itself, and the other listings that told it the same thing.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
What it can do
Permissions this extension asks for, as declared in version 1.0.25. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Read and change your data on every site you visit
*://*/*
Store data in your browser
storage
Read and change cookies, including the ones that keep you signed in
cookies
See the address and title of every tab you have open
tabs
Run its own code inside the pages you visit
scripting
See every page you navigate to, as you navigate to it
webNavigation
Store an unlimited amount of data in your browser
unlimitedStorage
Act on the current tab, but only after you click the extension
activeTab
Watch every request your browser makes
webRequest
Where it sends data
Destinations our analysis observed FatCoupon Cashback & Promo Codes contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- d3itvsmwj0r86k.cloudfront.net
FatCoupon Cashback & Promo Codes sends data to d3itvsmwj0r86k.cloudfront.net. No other extension we have analyzed sends data here.
- fc-test-connectors-mv3.s3.ap-northeast-1.amazonaws.com
FatCoupon Cashback & Promo Codes sends data to fc-test-connectors-mv3.s3.ap-northeast-1.amazonaws.com. No other extension we have analyzed sends data here.
- service.fatcoupon.com
FatCoupon Cashback & Promo Codes sends data to service.fatcoupon.com. No other extension we have analyzed sends data here.