CRXaminer

[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

Last scanned: about 3 hours ago

Extension Details

Context-Aware Verdict

MEDIUM

Overall Risk

Trust Factors: The extension appears to be focused on automotive websites based on its host permissions, which suggests a legitimate purpose for car shopping or vehicle research. However, critical information is missing - the extension has no name, description, author information, user count, or ratings, which significantly reduces trustworthiness. The lack of basic metadata makes it impossible to verify the developer's reputation or the extension's intended functionality.

Concerns: The extension has extremely broad host permissions across numerous automotive websites including AutoTrader, Gumtree, Motors, PistonHeads, and others. While these permissions align with an automotive-focused tool, they grant extensive access to inject content scripts and potentially monitor user activity across all these platforms. The storage permission allows data collection and retention. The absence of any identifying information about the extension's purpose, developer, or user base is a significant red flag.

Recommendations: Do not install this extension until you can verify its legitimacy through proper documentation and developer information. If you must use it, run it in a separate Chrome profile to isolate potential risks. Check the Chrome Web Store listing for complete details including description, reviews, and developer information before proceeding. Consider whether the functionality this extension provides is worth the broad access it requires across multiple automotive websites.

Findings

HIGH

Broad Host Permissions

This extension has broad host permissions allowing it to access many or all websites. This could potentially be used to steal sensitive data or track browsing activity.

MEDIUM

Medium-Risk Permission: storage

This extension has the storage permission. Can store data locally.

Security Analysis Details

Required Permissions:

storage

Host Permissions:

https://www.motorwatch.co.uk/*
*://*.autotrader.co.uk/*
*://heycar.com/uk/autos?*
*://www.motors.co.uk/*
*://www.pistonheads.com/*
*://www.gumtree.com/search?*
*://www.gumtree.com/search*search_category=cars*
*://www.gumtree.com/search*search_category=motorbikes-scooters*
*://www.gumtree.com/cars-vans-motorbikes/motorbikes-scooters*
*://www.gumtree.com/search*search_category=vans*
*://www.gumtree.com/cars-vans-motorbikes/vans*
*://www.gumtree.com/search*search_category=campervans-motorhomes*
*://www.gumtree.com/cars-vans-motorbikes/campervans-motorhomes*
*://www.gumtree.com/p/*
*://www.motorcyclenews.com/bikes-for-sale*
*://www.cinch.co.uk/used-cars*

Embedded URLs (47 total):

https://www.motorwatch.co.uk/api/v1	https://www.motorwatch.co.uk/onboarding
https://www.motorwatch.co.uk/uninstall?browser=Chrome&version=	https://tailwindcss.com
http://www.w3.org/2000/svg	http://www.w3.org/1999/xlink
https://clients2.google.com/service/update2/crx	https://www.motorwatch.co.uk/
https://www.autotrader.co.uk/car-search	https://www.autotrader.co.uk/electric-bike-search
https://www.autotrader.co.uk/motorhome-search	https://www.autotrader.co.uk/caravan-search
https://www.autotrader.co.uk/truck-search	https://www.autotrader.co.uk/van-search
https://www.autotrader.co.uk/bike-search	https://www.autotrader.co.uk/farm-search
https://www.autotrader.co.uk/plant-search	https://www.autotrader.co.uk/secure/saved-adverts
https://www.autotrader.co.uk/car-details	https://www.autotrader.co.uk/van-details
https://www.autotrader.co.uk/bike-details	https://heycar.com/uk/autos?
https://www.motors.co.uk/search/car/	https://www.motors.co.uk/car-
https://www.pistonheads.com/buy/search	https://www.pistonheads.com/buy/listing/
https://www.pistonheads.com/account/bookmarks	https://www.gumtree.com/search
https://www.gumtree.com/cars-vans-motorbikes/motorbikes-scooters	https://www.gumtree.com/cars-vans-motorbikes/vans
https://www.gumtree.com/cars-vans-motorbikes/campervans-motorhomes	https://www.gumtree.com/p/
https://www.motorcyclenews.com/bikes-for-sale/	https://www.cinch.co.uk/used-cars/
https://www.cinch.co.uk/used-cars?	https://www.cinch.co.uk/my-profile/favourites
https://fonts.googleapis.com	https://fonts.gstatic.com
https://fonts.cdnfonts.com/css/uk-number-plate	https://discord.gg/T4H57T8qQq
https://www.motorwatch.co.uk/privacy-policy	https://chrome.google.com/webstore/detail/motorwatch-autotrader-pis/cmihhekbihecfajbiokajdiajnffdfpn?hl=en-GB
https://addons.mozilla.org/en-US/firefox/addon/motorwatch-car-price-tracker/	https://www.google-analytics.com/mp/collect
https://www.google-analytics.com/debug/mp/collect	https://developers.google.com/analytics/devguides/collection/protocol/ga4/sending-events?client_type=gtag#recommended_parameters_for_reports
https://developers.google.com/analytics/devguides/collection/protocol/ga4/reference?client_type=gtag#reserved_names

Raw Manifest

{
  "name": "Motorwatch - car price tracker",
  "icons": {
    "16": "images/motorwatch-website-favicon-color.png",
    "48": "images/motorwatch-website-favicon-color.png",
    "128": "images/motorwatch-website-favicon-color.png"
  },
  "action": {
    "default_icon": {
      "16": "images/motorwatch-website-favicon-color.png",
      "48": "images/motorwatch-website-favicon-color.png",
      "128": "images/motorwatch-website-favicon-color.png"
    },
    "default_popup": "popup.html"
  },
  "version": "0.7.9",
  "background": {
    "type": "module",
    "service_worker": "background.js"
  },
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "Motorwatch - car and bike price tracker AutoTrader UK, Pistonheads, Cinch and MCN",
  "permissions": [
    "storage"
  ],
  "content_scripts": [
    {
      "js": [
        "scripts/autotrader/content.js",
        "scripts/funcs.js"
      ],
      "css": [
        "dist/styles.css"
      ],
      "runat": "documnent_idle",
      "matches": [
        "https://www.autotrader.co.uk/car-search*",
        "https://www.autotrader.co.uk/electric-bike-search*",
        "https://www.autotrader.co.uk/motorhome-search*",
        "https://www.autotrader.co.uk/caravan-search*",
        "https://www.autotrader.co.uk/truck-search*",
        "https://www.autotrader.co.uk/van-search*",
        "https://www.autotrader.co.uk/bike-search*",
        "https://www.autotrader.co.uk/farm-search*",
        "https://www.autotrader.co.uk/plant-search*"
      ],
      "all_frames": true
    },
    {
      "js": [
        "scripts/autotrader/saved.js"
      ],
      "css": [
        "css/styles.css"
      ],
      "runat": "documnent_idle",
      "matches": [
        "https://www.autotrader.co.uk/secure/saved-adverts*"
      ],
      "all_frames": true
    },
    {
      "js": [
        "scripts/funcs.js",
        "scripts/autotrader/details.js",
        "scripts/init.js"
      ],
      "css": [
        "dist/styles.css"
      ],
      "runat": "documnent_idle",
      "matches": [
        "https://www.autotrader.co.uk/car-details*",
        "https://www.autotrader.co.uk/van-details*",
        "https://www.autotrader.co.uk/bike-details*"
      ],
      "all_frames": true
    },
    {
      "js": [
        "scripts/heycar/content.js"
      ],
      "css": [
        "css/styles.css"
      ],
      "runat": "documnent_idle",
      "matches": [
        "https://heycar.com/uk/autos?*"
      ],
      "all_frames": true
    },
    {
      "js": [
        "scripts/motors/content.js",
        "scripts/funcs.js"
      ],
      "css": [
        "css/styles.css"
      ],
      "runat": "documnent_idle",
      "matches": [
        "https://www.motors.co.uk/search/car/*"
      ],
      "all_frames": true
    },
    {
      "js": [
        "scripts/funcs.js",
        "scripts/motors/details.js",
        "scripts/init.js"
      ],
      "css": [
        "dist/styles.css"
      ],
      "runat": "documnent_idle",
      "matches": [
        "https://www.motors.co.uk/car-*"
      ],
      "all_frames": true
    },
    {
      "js": [
        "scripts/pistonheads/content.js",
        "scripts/funcs.js"
      ],
      "css": [
        "dist/styles.css"
      ],
      "runat": "documnent_idle",
      "matches": [
        "https://www.pistonheads.com/buy/search*"
      ],
      "all_frames": true
    },
    {
      "js": [
        "scripts/pistonheads/details.js",
        "scripts/init.js",
        "scripts/funcs.js"
      ],
      "css": [
        "dist/styles.css"
      ],
      "runat": "documnent_idle",
      "matches": [
        "https://www.pistonheads.com/buy/listing/*"
      ],
      "all_frames": true
    },
    {
      "js": [
        "scripts/pistonheads/favourites.js"
      ],
      "css": [
        "css/styles.css"
      ],
      "runat": "documnent_idle",
      "matches": [
        "https://www.pistonheads.com/account/bookmarks*"
      ],
      "all_frames": true
    },
    {
      "js": [
        "scripts/gumtree/content.js",
        "scripts/funcs.js"
      ],
      "css": [
        "dist/styles.css"
      ],
      "runat": "documnent_idle",
      "matches": [
        "https://www.gumtree.com/search*search_category=cars*",
        "https://www.gumtree.com/search*search_category=motorbikes-scooters*",
        "https://www.gumtree.com/cars-vans-motorbikes/motorbikes-scooters",
        "https://www.gumtree.com/search*search_category=vans*",
        "https://www.gumtree.com/cars-vans-motorbikes/vans*",
        "https://www.gumtree.com/search*search_category=campervans-motorhomes*",
        "https://www.gumtree.com/cars-vans-motorbikes/campervans-motorhomes*"
      ],
      "all_frames": true
    },
    {
      "js": [
        "scripts/gumtree/details.js",
        "scripts/init.js",
        "scripts/funcs.js"
      ],
      "css": [
        "dist/styles.css"
      ],
      "runat": "documnent_idle",
      "matches": [
        "https://www.gumtree.com/p/*"
      ],
      "all_frames": true
    },
    {
      "js": [
        "scripts/mcn/content.js"
      ],
      "css": [
        "css/styles.css"
      ],
      "runat": "documnent_idle",
      "matches": [
        "https://www.motorcyclenews.com/bikes-for-sale/*/?*"
      ],
      "all_frames": true
    },
    {
      "js": [
        "scripts/mcn/details.js",
        "scripts/init.js"
      ],
      "css": [
        "css/styles.css"
      ],
      "runat": "documnent_idle",
      "matches": [
        "https://www.motorcyclenews.com/bikes-for-sale/*/*/*/"
      ],
      "all_frames": true
    },
    {
      "js": [
        "scripts/cinch/content.js",
        "scripts/funcs.js"
      ],
      "css": [
        "dist/styles.css"
      ],
      "runat": "documnent_idle",
      "matches": [
        "https://www.cinch.co.uk/used-cars/*/*",
        "https://www.cinch.co.uk/used-cars/*",
        "https://www.cinch.co.uk/used-cars?*"
      ],
      "all_frames": true,
      "exclude_matches": [
        "https://www.cinch.co.uk/used-cars/*/*/*"
      ]
    },
    {
      "js": [
        "scripts/cinch/details.js",
        "scripts/funcs.js",
        "scripts/init.js"
      ],
      "css": [
        "dist/styles.css"
      ],
      "runat": "documnent_idle",
      "matches": [
        "https://www.cinch.co.uk/used-cars/*/*/*"
      ],
      "all_frames": true
    },
    {
      "js": [
        "scripts/cinch/favourites.js"
      ],
      "css": [
        "css/styles.css"
      ],
      "runat": "documnent_idle",
      "matches": [
        "https://www.cinch.co.uk/my-profile/favourites*"
      ],
      "all_frames": true
    }
  ],
  "host_permissions": [
    "https://www.motorwatch.co.uk/*",
    "*://*.autotrader.co.uk/*",
    "*://heycar.com/uk/autos?*",
    "*://www.motors.co.uk/*",
    "*://www.pistonheads.com/*",
    "*://www.gumtree.com/search?*",
    "*://www.gumtree.com/search*search_category=cars*",
    "*://www.gumtree.com/search*search_category=motorbikes-scooters*",
    "*://www.gumtree.com/cars-vans-motorbikes/motorbikes-scooters*",
    "*://www.gumtree.com/search*search_category=vans*",
    "*://www.gumtree.com/cars-vans-motorbikes/vans*",
    "*://www.gumtree.com/search*search_category=campervans-motorhomes*",
    "*://www.gumtree.com/cars-vans-motorbikes/campervans-motorhomes*",
    "*://www.gumtree.com/p/*",
    "*://www.motorcyclenews.com/bikes-for-sale*",
    "*://www.cinch.co.uk/used-cars*"
  ],
  "manifest_version": 3,
  "web_accessible_resources": [
    {
      "matches": [
        "<all_urls>"
      ],
      "resources": [
        "images/motorwatch-website-favicon-color.png",
        "images/motorwatch-logo.png",
        "images/motorwatch-logo-black-145.png",
        "images/vrm-input-icon.svg",
        "images/MotorlyCarFinanceLg.png",
        "images/motorly-small.png"
      ]
    }
  ]
}

by ✦ Astarte