Is Navigate Rewards safe?

Low risk

Navigate Rewards scrapes order history from Amazon, eBay, Etsy, and other shopping sites, and Reddit content, then forwards it to prod.socialsurfer.xyz.

The extension installs content scripts on major shopping platforms (Amazon, eBay, Etsy, Shopee, Lazada, Flipkart, Alibaba) and Reddit. On a server-assigned schedule, it opens hidden browser windows to order history and Reddit thread pages, extracts order details (IDs, dates, totals, shipping addresses, product titles) and Reddit post and comment content, then uploads the data to prod.socialsurfer.xyz. The extension also accepts server-assigned tasks to scrape public product pages on Amazon, real estate listings on Zillow, and video metadata on YouTube, and pings the same server every minute with a unique device identifier so the server can assign and control scraping tasks remotely.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

Navigatev1.3.0Chrome Web Store
18Risk
Who publishes it

Navigate - 1 other listing from the same operator, none carrying a finding

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
Navigate
Declared legal entity
Navigate
Registered contact
Navigate Foundation LTD

Same store account

1 other listing published from this account, 157 users between them, none of them carrying a finding.

navigate-compass-%E2%80%93-fact-c157Clean

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 1.3.0. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on every site you visit

    <all_urls>

  • Read and change your data on dataquest.nvg8.io

    https://dataquest.nvg8.io/*

  • Read and change your data on dev.socialsurfer.xyz

    https://dev.socialsurfer.xyz/*

  • Read and change your data on prod.socialsurfer.xyz

    https://prod.socialsurfer.xyz/*

  • Read and change your data on api-dev.socialsurfer.xyz

    https://api-dev.socialsurfer.xyz/*

  • Read and change your data on localhost:3000

    http://localhost:3000/*

  • Read and change your data on localhost:3001

    http://localhost:3001/*

  • Read and change your data on backend-dev.nvg8.io

    https://backend-dev.nvg8.io/*

  • Read and change your data on staging.nvg8.io

    https://staging.nvg8.io/*

  • See the address and title of every tab you have open

    tabs

  • Store data in your browser

    storage

  • Schedule its own background tasks

    alarms

  • Run its own code inside the pages you visit

    scripting

  • See every page you navigate to, as you navigate to it

    webNavigation

  • Detect when you step away from your computer

    idle

windowsincognito

Where it sends data

Destinations our analysis observed Navigate Rewards contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • prod.socialsurfer.xyz

    Navigate Rewards sends data to prod.socialsurfer.xyz. No other extension we have analyzed sends data here.

Updated 2 November 2026nggldafanajogepfhigplhkamalbpghc