BestBuy Search By Image

BestBuy Search By Image

ID: nppjmiadmakeigiagilkfffplihgjlec

Supported Languages

šŸ‡ŗšŸ‡øEnglish

Extension Info & Metadata

Status
Active
Version
4.0.1
Size
0.04 MB
Rating
0.0/5
Reviews
0
Users
1
Type
Extension
Updated
May 20, 2026
Category
Tools
Price
Free
Featured
No
Visibility
Listed
Mature
No
By Google
No
Trusted
No

Publisher Contextual Analysis

Author
ecomstal.officialView Profile
Country
BD
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
No
Mailbox exists
Yes
Address
House: 1034, Avenue: 8, Mirpur DOHS Dhaka 1216 BD
Website
Visit
Total Extensions
20
Active
19
Obsolete
0
Listed
20
Unlisted
0
Total Users
101
Screenshot 1
Screenshot 2

Right-click any image to search on BestBuy! Find products fast and dropship easily with this powerful image search tool.

Find Products on BestBuy Using Any Image (One Right-Click) BestBuy Search by Image helps you quickly search BestBuy using an image from anywhere on the web. Just right-click an image and choose ā€œSearch on BestBuyā€ā€”the extension opens a new tab with search results so you can find similar items, compare prices, and research products faster. Great for shoppers, deal hunters, and product researchers who want a faster way to match products from screenshots, ads, or competitor listings. ⭐ Key Features āœ… Right-Click ā€œSearch on BestBuyā€ Adds a context-menu option to search an image directly on BestBuy. āœ… Works on Most Websites Use images from online stores, ads, social media, blogs, or competitor product pages. āœ… Faster Product Research Quickly find similar products and compare options. āœ… Lightweight & Easy No setup—install and start searching instantly. āœ… Privacy-Friendly Only uses the image you select when you trigger the search action. 🧠 How to Use āžœ Find any image on the web āžœ Right-click the image āžœ Select ā€œSearch on BestBuyā€ āžœ View results on BestBuy in a new tab šŸ”’ Privacy This extension does not collect or sell personal data. It only initiates a search when you choose the context-menu option. šŸ¤ Affiliate Disclosure Some links shown in the extension (or its pages) may be affiliate links. If you click and make a purchase, we may earn a commission at no extra cost to you. This helps support ongoing development and maintenance. FAQs 1) Do I need to download the image first? No. Just right-click the image and select ā€œSearch on BestBuy.ā€ 2) Does it work on any website? It works on most websites where images can be right-clicked, but some sites block right-click or protect images. 3) Where does the search open? It opens BestBuy search results in a new tab. 4) Does the extension store my images or browsing history? No. It does not store images or track browsing—search runs only when you trigger it. 5) Why doesn’t it work on some images? Some images are protected, embedded, or restricted, so they may not be accessible for right-click image search.

Item
Type
Severity
Description
<all_urls>
Host
Critical
Broad host access — the extension can read/modify content on every website.
Broad Host Permissions
Risk Factor
High
This extension has broad host permissions allowing it to access many or all websites.
contextMenus
Permission
Low
This permission adds items to browser context menus. Rated Medium because it only modifies right-click menus without access to page content.

The content script silently rewrites every BestBuy product link on bestbuy.com and bestbuy.ca pages to redirect through the third-party affiliate tracking domain `tr.tdwarp.com`. This is executed on page load and continuously via a MutationObserver for dynamically injected content (e.g. infinite scroll), ensuring comprehensive interception. The CWS listing declares zero data collection and the extension description contains no mention of affiliate monetisation — this constitutes undisclosed, covert affiliate-link hijacking of the user's organic BestBuy clicks.

content.js (Line 1)
// Content script to convert related product links to affiliate linksconst AFFILIATE_BASE_US = "https://tr.tdwarp.com/f3ab549098644b70d6c2?ulp=";const AFFILIATE_BASE_CA = "https://tr.tdwarp.com/f3ab549098d1e585bd59?ulp=";function convertToAffiliateLink(url) {  try {    const targetUrl = encodeURIComponent(url);    if (url.includes("bestbuy.ca")) {      return `${AFFILIATE_BASE_CA}${targetUrl}`;    } else {      return `${AFFILIATE_BASE_US}${targetUrl}`;    }  } catch (e) {    console.error("Error converting link:", e);    return url;  }}function processLinks() {  const links = document.querySelectorAll('a[href]');  links.forEach(link => {    if (link.dataset.affiliateProcessed) return;    let href = link.href;    if ((href.includes("bestbuy.com") || href.includes("bestbuy.ca")) && !href.includes("tr.tdwarp.com")) {      if (href.includes(".p")) {        const newHref = convertToAffiliateLink(href);        link.href = newHref;        link.dataset.affiliateProcessed = "true";      }    }  });}

A MutationObserver watches the entire BestBuy page body for any newly added DOM nodes and re-runs the affiliate link replacement on every insertion. This ensures that product links loaded via infinite scroll, AJAX, or lazy rendering are also hijacked, making the interception comprehensive and persistent throughout the user's entire browsing session on BestBuy.

content.js (Line 43)
// Observe for dynamic content (infinite scroll, "More to love" loading)const observer = new MutationObserver((mutations) => {  let shouldProcess = false;  for (const mutation of mutations) {    if (mutation.addedNodes.length > 0) {      shouldProcess = true;      break;    }  }  if (shouldProcess) {    processLinks();  }});observer.observe(document.body, {  childList: true,  subtree: true});

The welcome page presents a 'Go to BestBuy' button that is itself a bare affiliate tracking link through `tr.tdwarp.com` rather than a direct link to bestbuy.com. The HTML comment 'Updated Affiliate Link' confirms this is intentional. Combined with the presence of a local 'Affiliate Disclaimer' page (welcome.html:105) that is kept separate from the CWS listing, this demonstrates the developer knowingly concealed the affiliate monetisation from the Chrome Web Store disclosure.

welcome.html (Line 56)
<div class="demo-link">  <!--Updated Affiliate Link-->  <a href="https://tr.tdwarp.com/f3ab549098644b70d6c2?ulp=" class="btn-demo" target="_blank"> Go to    BestBuy </a>

By severity

Critical1
High2
Medium0
Low0

Versions scanned

Showing 1 of 2 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension VersionCode Review Findings
4.0.13

Files with findings

2 distinct paths — top paths by unique finding count:

  • content.js2
  • welcome.html1
S.No.
Category
Severity
File
Summary
Found in Version
1Other
critical
content.js (line 1)The content script silently rewrites every BestBuy product link on bestbuy.com and bestbuy.ca pages to redirect through the third-party affiliate tracking domain `tr.tdwarp.com`. This is executed on page load and cont…
2Other
high
content.js (line 43)A MutationObserver watches the entire BestBuy page body for any newly added DOM nodes and re-runs the affiliate link replacement on every insertion. This ensures that product links loaded via infinite scroll, AJAX, or…
3Other
high
welcome.html (line 56)The welcome page presents a 'Go to BestBuy' button that is itself a bare affiliate tracking link through `tr.tdwarp.com` rather than a direct link to bestbuy.com. The HTML comment 'Updated Affiliate Link' confirms thi…
URLs
23
IPv4
0
IPv6
0

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

Gain full insight into all external connections.

Upgrade for full visibility.

clients2.google.com/service/update2/crxhttps://clients2.google.com/service/update2/crx
c2pa-ocsp.pki.goog/04+0%EF%BF%BD(http://pki.goog/c2pa/media-1p-ica-g3.crt0Uhttp://c2pa-ocsp.pki.goog/04+0ļæ½(http://pki.goog/c2pa/media-1p-ica-g3.crt0U
pki.goog/c2pa/root-g3.crt0&+0%EF%BF%BDhttp://c2pa-ocsp.pki.goog/0Uhttp://pki.goog/c2pa/root-g3.crt0&+0ļæ½http://c2pa-ocsp.pki.goog/0U#0��\Ų‰SCļæ½ZՁ��**-ļæ½0Uļæ½{ὓ,����k��J����70
c2pa-ocsp.pki.goog/04+0%EF%BF%BD(http://pki.goog/c2pa/core-tsa-ica-g3.crt0Uhttp://c2pa-ocsp.pki.goog/04+0ļæ½(http://pki.goog/c2pa/core-tsa-ica-g3.crt0U
pki.goog/c2pa/root-g3.crt0&+0%EF%BF%BDhttp://c2pa-ocsp.pki.goog/0Uhttp://pki.goog/c2pa/root-g3.crt0&+0ļæ½http://c2pa-ocsp.pki.goog/0U#0��\Ų‰SCļæ½ZՁ��**-ļæ½0Uļæ½U��`t;ļæ½jļæ½Deļæ½a����0
pki.goog/c2pa/media-1p-ica-g3.crt0http://pki.goog/c2pa/media-1p-ica-g3.crt0
chromewebstore.google.com/detail/save-money-on-aliexpress/nmpnpjhdnlgejoekbckipooikhoijpkchttps://chromewebstore.google.com/detail/save-money-on-aliexpress/nmpnpjhdnlgejoekbckipooikhoijpkc
tr.tdwarp.com/f3ab549098644b70d6c2https://tr.tdwarp.com/f3ab549098644b70d6c2?ulp=
bestbuy.com-https://bestbuy.com
bestbuy.ca-https://bestbuy.ca
Showing 1 to 10 of 30 rows
Rows per page:

Gain full insight into all external connections.

Upgrade for full visibility.

No IP addresses found
Version
Size
Is Malicious
Findings
Permhash
4.0.2
Latest
0.04 MB
Malicious
—
4.0.1
0.04 MB
Malicious
3
Showing 1 to 2 of 10 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files (scanned top 25 shared text files)

No comparable text files found between these versions.

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.