Is TuffBlocker safe?

Medium risk

TuffBlocker sends supported shopping and Google page URLs with an install identifier to api.weberowsky-yt.workers.dev.

When enabled, TuffBlocker monitors completed page loads on its supported shopping-agent/product domains and Google, then asks api.weberowsky-yt.workers.dev to convert the current URL. It also rewrites registration or login pages on several shopping sites to add hardcoded affiliate referral codes and can set or hide referral fields on some registration forms.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

SyntaxCrew Devs.v1.3Chrome Web Store
40Risk
Who publishes it

SyntaxCrew Devs. - 1 other listing from the same operator, none carrying a finding

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
SyntaxCrew Devs.

Same store account

1 other listing published from this account, 5k+ users between them, none of them carrying a finding.

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 1.3. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on cnfans.com

    https://*.cnfans.com/* and 1 more

  • Read and change your data on usfans.com

    https://*.usfans.com/*

  • Read and change your data on mulebuy.com

    https://*.mulebuy.com/* and 1 more

  • Read and change your data on yupoo.com

    https://*.yupoo.com/*

  • Read and change your data on hoobuy.com

    https://*.hoobuy.com/* and 1 more

  • Read and change your data on hagobuy.com

    https://*.hagobuy.com/* and 1 more

  • Read and change your data on hegobuy.com

    https://*.hegobuy.com/*

  • Read and change your data on weidian.com

    https://*.weidian.com/* and 1 more

  • Read and change your data on v.weidian.com

    https://*.v.weidian.com/*

  • Read and change your data on item.taobao.com

    *://*.item.taobao.com/*

  • Read and change your data on detail.tmall.com

    *://*.detail.tmall.com/*

  • Read and change your data on detail.1688.com

    *://*.detail.1688.com/*

  • Read and change your data on tb.cn

    *://*.tb.cn/*

  • Read and change your data on taobao.com

    *://*.taobao.com/*

  • Read and change your data on tmall.com

    *://*.tmall.com/*

  • Read and change your data on superbuy.com

    *://*.superbuy.com/*

  • Read and change your data on wegobuy.com

    *://*.wegobuy.com/*

  • Read and change your data on allchinabuy.com

    *://*.allchinabuy.com/*

  • Read and change your data on google.com

    *://*.google.com/*

  • Read and change your data on pandabuy.com

    *://*.pandabuy.com/*

  • Read and change your data on joyabuy.com

    *://*.joyabuy.com/*

  • Read and change your data on sugargoo.com

    *://*.sugargoo.com/*

  • Read and change your data on cssbuy.com

    *://*.cssbuy.com/*

  • Read and change your data on basetao.com

    *://*.basetao.com/*

  • Read and change your data on lovegobuy.com

    *://*.lovegobuy.com/*

  • Read and change your data on kameymall.com

    *://*.kameymall.com/*

  • Read and change your data on eastmallbuy.com

    *://*.eastmallbuy.com/*

  • Read and change your data on hubbuycn.com

    *://*.hubbuycn.com/*

  • Read and change your data on oopbuy.com

    *://*.oopbuy.com/*

  • Read and change your data on orientdig.com

    *://*.orientdig.com/*

  • Read and change your data on kakobuy.com

    *://*.kakobuy.com/*

  • Read and change your data on okeyhaul.com

    *://*.okeyhaul.com/*

  • Store data in your browser

    storage

  • See the address and title of every tab you have open

    tabs

Where it sends data

Destinations our analysis observed TuffBlocker contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • api.weberowsky-yt.workers.dev

    TuffBlocker sends data to api.weberowsky-yt.workers.dev. One other extension we have analysed sends data here.

Updated 30 September 2026kglmikanidekkinondpmaekpcjlcfcjj