diff --git a/src/extension/content-script/onendalby.js b/src/extension/content-script/onendalby.js
index 35f095bbfc..fe454dc2b0 100644
--- a/src/extension/content-script/onendalby.js
+++ b/src/extension/content-script/onendalby.js
@@ -97,7 +97,7 @@ function postMessage(ev, response) {
       data: response,
       scope: "alby",
     },
-    "*"
+    window.location.origin
   );
 }
 
diff --git a/src/extension/content-script/onendnostr.js b/src/extension/content-script/onendnostr.js
index 708c7bd407..79a36dd04d 100644
--- a/src/extension/content-script/onendnostr.js
+++ b/src/extension/content-script/onendnostr.js
@@ -119,7 +119,7 @@ function postMessage(ev, response) {
       data: response,
       scope: "nostr",
     },
-    "*"
+    window.location.origin
   );
 }
 
diff --git a/src/extension/content-script/onendwebbtc.js b/src/extension/content-script/onendwebbtc.js
index ffec3824b2..0c7dd6d9c5 100644
--- a/src/extension/content-script/onendwebbtc.js
+++ b/src/extension/content-script/onendwebbtc.js
@@ -107,7 +107,7 @@ function postMessage(ev, response) {
       data: response,
       scope: SCOPE,
     },
-    "*"
+    window.location.origin
   );
 }
 
diff --git a/src/extension/content-script/onendwebln.js b/src/extension/content-script/onendwebln.js
index 8b4af99743..33ad27bd3a 100644
--- a/src/extension/content-script/onendwebln.js
+++ b/src/extension/content-script/onendwebln.js
@@ -126,7 +126,7 @@ function postMessage(ev, response) {
       data: response,
       scope: "webln",
     },
-    "*"
+    window.location.origin
   );
 }
 
diff --git a/src/extension/providers/postMessage.ts b/src/extension/providers/postMessage.ts
index 8ceed30c92..c3c84843a8 100644
--- a/src/extension/providers/postMessage.ts
+++ b/src/extension/providers/postMessage.ts
@@ -17,7 +17,7 @@ export function postMessage<T>(
         scope: scope,
         args,
       },
-      "*" // TODO use origin
+      window.location.origin
     );
 
     function handleWindowMessage(messageEvent: MessageEvent) {