Is Scan Profit safe?

Low risk

Scan Profit accepts storefront page messages that can trigger authenticated product lookups to app.scanprofit.com.

Scan Profit injects a sidebar iframe on supported storefront pages and accepts page messages without checking the sender origin. Those messages can set a product ID or search text, causing the extension to send authenticated product lookup, sales, and history requests to ScanProfit's API.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

Scan Profit LLCv2.1Chrome Web Store
15Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 2.1. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on scanprofit.com

    https://*.scanprofit.com/*

  • Read and change your data on amazon.com

    https://*.amazon.com/*

  • Read and change your data on amazon.ca

    https://*.amazon.ca/*

  • Read and change your data on amazon.fr

    https://*.amazon.fr/*

  • Read and change your data on amazon.it

    https://*.amazon.it/*

  • Read and change your data on amazon.de

    https://*.amazon.de/*

  • Read and change your data on walmart.com

    https://*.walmart.com/*

  • Read and change your data on walmart.ca

    https://*.walmart.ca/*

  • Read and change your data on updinc.net

    https://*.updinc.net/*

  • Read and change your data on 4sgm.com

    https://*.4sgm.com/*

  • Read and change your data on vitacost.com

    https://*.vitacost.com/*

  • Read and change your data on kehe.com

    https://*.kehe.com/*

  • Read and change your data on okktoys.com

    https://*.okktoys.com/*

  • Read and change your data on sheets.googleapis.com

    https://sheets.googleapis.com/*

  • Sign you in with your Google account

    identity

  • Act on the current tab, but only after you click the extension

    activeTab

  • Store data in your browser

    storage

  • Add items to the right-click menu

    contextMenus

Where it sends data

Destinations our analysis observed Scan Profit contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • app.scanprofit.com

    Scan Profit sends data to app.scanprofit.com. No other extension we have analysed sends data here.

Updated 30 September 2026jnilegaoodpdnbafepkfcfciihoacjcd