High risk browser extensions

Adblock for Youtube™ fetches remotely-controlled blocking rules and scriptlets from its own servers on every startup.

Online Security reads up to 100,000 URLs from your browser history and sends them to a third-party server on every tab navigation.

Free VPN for Chrome sends every URL you visit, along with referrer and timestamps, to the developer's own monitoring server.

Loom sends analytics events including your Segment identity and loom.com cookies to api.segment.io.

WPS PDF transmits persistent device and user identifiers to Google Analytics on every extension event.

Hola VPN captures Chrome-internal identity headers from your Google requests and sends them to its servers every 10 minutes.

Stands AdBlocker transmits every page URL and referrer to standsapp.org on each navigation, linked to a persistent user ID.

Code analysis indicates Rakuten captures the full HTML of your order confirmation pages and sends it to third-party servers.

Sets the browser homepage to Bing.com and adds one-click Bing search for highlighted text.

SetupVPN encrypts all its API traffic with a per-request XOR key, making it impossible to inspect what data is being sent.

i芒果・新标签页 sends the URL of every tab you visit to mgtv.com servers, paired with a persistent device fingerprint.

Audio editor online X-Audacity transmits every visited URL, hex-encoded, to offidocs.com along with a persistent per-installation tracking ID.

Ad Block Ninja records each top-level site visit and sends visited-domain history plus device fingerprint signals to ninja-block.com.

Liner sends every visited page URL and Google search queries to its servers on each page load for logged-in users.

Stop Ads Now collects hardware fingerprints and visited domain history from every page and sends them to stopads-now.com.

Blocks ads, video interruptions, and pop-ups while you browse the web.