High risk browser extensions

Adblock for Youtube™ fetches remotely-controlled blocking rules and scriptlets from its own servers on every startup.

Free VPN for Chrome sends every URL you visit, along with referrer and timestamps, to the developer's own monitoring server.

WPS PDF transmits persistent device and user identifiers to Google Analytics on every extension event.

Hola VPN captures Chrome-internal identity headers from your Google requests and sends them to its servers every 10 minutes.

Code analysis indicates Rakuten captures the full HTML of your order confirmation pages and sends it to third-party servers.

Poper Blocker sends browsing data (URL, referrer, clicked links) to its own servers and pulls remote scraping rules that drive DOM data extraction.

SetupVPN encrypts all its API traffic with a per-request XOR key, making it impossible to inspect what data is being sent.

i芒果・新标签页 sends the URL of every tab you visit to mgtv.com servers, paired with a persistent device fingerprint.

Audio editor online X-Audacity transmits every visited URL, hex-encoded, to offidocs.com along with a persistent per-installation tracking ID.

Ad Block Ninja records each top-level site visit and sends visited-domain history plus device fingerprint signals to ninja-block.com.

Stop Ads Now collects hardware fingerprints and visited domain history from every page and sends them to stopads-now.com.

The extension fetches proxy server configurations at runtime from remote dead-drop URLs, allowing operators to silently reroute all proxied browser traffic.

Blocks unwanted ads to provide a cleaner, faster browsing experience.

This extension briefly shows ads before hiding them for a cleaner browsing experience.

Cash Catch runs on every site and sends the full URL, referrer, and hostname of each page you visit to its servers.

This extension notifies you when cheaper flight prices are available during your flight search.