Am I Being Pwned? logoAm I Being Pwned?
Book a demo
HomeSorftime Save
Findings · 3
+5 more findings locked
MEDIUM FINDINGS · 3
  1. 01New FlowCircle/queryProductVariant and ProductBoard/QueryVectorSimilarProduct endpoints transmit product identifiers to sorftime.com
  2. 02tk-inject.js now runs on shop.tiktok.com (TikTok's standalone e-commerce subdomain) in addition to www.tiktok.com, intercepting the same fetch API calls and DOM product data that existing claims cover for the /shop path
  3. 03Amazon product detail data and FBA fee information transmitted to sorftime.com servers
+5 more findings locked
OTHER EXTENSIONS

Is Sorftime Save safe?

Medium risk

No summary available.

Sorftimev1.4.6.6Chrome Web Store
45Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Findings

+5 more findings not shown

Book a call to see all findingsScan your browser
Updated 30 May 2026aadiiicebnjmjmibjengdohedcfeekeg

Am I Being Pwned?

Protecting organizations from malicious browser extensions.

© 2026 Bay Area Labs Inc. All rights reserved.

BlogHow it worksSecurityFor VendorsFAQAPI DocsPrivacy PolicyTerms of ServiceContact