Am I Being Pwned? logoAm I Being Pwned?
Book a demo
HomeTroywell Cashback - discounts and cashback
Findings · 3
+2 more findings locked
HIGH FINDINGS · 3
  1. 01On install, enumerates all installed extensions via chrome.management.getAll() and exfiltrates their IDs to Google Analytics
  2. 02Remote-config-driven 'thanos' module uses chrome.management.setEnabled() to disable other browser extensions based on server-supplied lists of extension IDs
  3. 03Content script scrapes search result page (SERP) content including search phrase, result titles, links, text snippets, and keyword highlights, then exfiltrates to analytics.troywell.org
+2 more findings locked
OTHER EXTENSIONS

Is Troywell Cashback - discounts and cashback safe?

High risk

No summary available.

v1.0.1Chrome Web Store
75Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Findings

+2 more findings not shown

Book a call to see all findingsScan your browser
Updated 30 May 2026jcmbmadioaobdgfbmbpenhlcppfcahhi

Am I Being Pwned?

Protecting organizations from malicious browser extensions.

© 2026 Bay Area Labs Inc. All rights reserved.

BlogHow it worksSecurityFor VendorsFAQAPI DocsPrivacy PolicyTerms of ServiceContact