Deal Miner - Hidden Hotel Deals, Price Comparison, Travel Discounts
Version 2.0.1 View in Chrome Web Store
Last scanned: about 10 hours ago
Extension Details
Developer:
JoyZone Games LLC
Rating:
5.0 ★
(5 ratings)
Users:
774
Context-Aware Verdict
This section provides a Claude-based AI analysis that applies additional context to the risk. Results are not guaranteed to be accurate.
MEDIUM
Overall Risk
Trust Factors:
The extension has a perfect 5.0 rating but with only 5 reviews and 774 users, which is a very small sample size. The developer JoyZone Games LLC appears to be primarily a gaming company, which raises questions about their expertise in travel deal aggregation. The low user count and limited review history make it difficult to establish strong trust indicators.
Concerns:
The most significant concern is the extremely broad host permissions that grant access to dozens of major travel and hotel booking websites across multiple countries. While this aligns with the extension's stated purpose of finding hotel deals, the scope is unusually extensive and creates substantial attack surface. The combination of storage permissions with such broad web access means the extension could potentially collect and store sensitive travel booking data, personal information, or browsing patterns across all these major travel platforms.
The developer's background in gaming rather than travel technology, combined with the small user base, suggests this may be a newer or less established service in the travel deal space.
Recommendations:
Consider using this extension in a separate Chrome profile to isolate it from your main browsing data. Before installing, verify the legitimacy of the developer and check if established travel deal extensions with larger user bases might serve your needs. Monitor your travel booking accounts for any unusual activity after use. Given the broad permissions, only use this extension when actively searching for travel deals rather than leaving it enabled permanently.
Findings
This section provides a detailed analysis of the extension's security posture, without broader context. Assumes worst-case impact.
HIGH
Broad Host Permissions
This extension has broad host permissions allowing it to access many or all websites. This could potentially be used to steal sensitive data or track browsing activity.
MEDIUM
Medium-Risk Permission: storage
This extension has the storage permission. Can store data locally.
Security Analysis Details
Required Permissions:
- storage
Host Permissions:
- https://*/*
Embedded URLs (85 total):
| https://www.getdealminer.com | https://react.dev/errors/ | |
| http://www.w3.org/2000/svg | http://www.w3.org/1998/Math/MathML | |
| http://www.w3.org/1999/xlink | http://www.w3.org/XML/1998/namespace | |
| https://github.com/wxt-dev/wxt/issues/371 | https://wxt.dev/guide/go-further/testing.html | |
| https://www.google-analytics.com/mp/collect | https://github.com/nevware21/ts-utils | |
| https://github.com/nevware21/ts-async | https://dc.services.visualstudio.com | |
| https://breeze.aimon.applicationinsights.io | https://dc-int.services.visualstudio.com | |
| https://js.monitor.azure.com/scripts/b/ai.config.1.cfg.json | https://eastus-8.in.applicationinsights.azure.com/ | |
| https://eastus.livediagnostics.monitor.azure.com/ | https://api.getdealminer.com/hotels/availability/v1 | |
| https://api.getdealminer.com/email-hidden-deal | https://api.getdealminer.com/hotels/availability/v2 | |
| https://clients2.google.com/service/update2/crx | https://www.pinklemon.app/ | |
| https://www.getdealminer.com/ | https://www.booking.com/ | |
| https://www.hoteles.com/ | https://www.hotels.cn/ | |
| https://www.hoteis.com/ | https://www.orbitz.com/ | |
| https://www.travelocity.com/ | https://www.wotif.com/ | |
| https://www.amextravel.com/ | https://www.travelextras-delta.com/ | |
| https://vacations.alaskaair.com/ | https://www.costcotravel.com/ | |
| https://www.costcotravel.ca/ | https://vacation.hotwire.com/ | |
| https://www.vio.com/ | https://www.hotwire.com/ | |
| https://all.accor.com/ | https://www.choicehotels.com/ | |
| https://www.expedia.ca/ | https://www.expedia.co.uk/ | |
| https://www.expedia.de/ | https://www.expedia.fr/ | |
| https://www.expedia.it/ | https://www.expedia.es/ | |
| https://www.expedia.nl/ | https://www.expedia.ie/ | |
| https://www.expedia.be/ | https://www.expedia.at/ | |
| https://www.expedia.ch/ | https://www.expedia.se/ | |
| https://www.expedia.dk/ | https://www.expedia.no/ | |
| https://www.expedia.co.jp/ | https://www.expedia.co.in/ | |
| https://www.expedia.co.th/ | https://www.expedia.co.id/ | |
| https://www.expedia.co.kr/ | https://www.expedia.co.nz/ | |
| https://www.expedia.com.au/ | https://www.expedia.com.sg/ | |
| https://www.expedia.com.hk/ | https://www.expedia.com.my/ | |
| https://www.expedia.com.ph/ | https://www.expedia.com.tw/ | |
| https://www.expedia.com.mx/ | https://www.expedia.com.br/ | |
| https://www.priceline.com/ | https://www.agoda.com/ | |
| https://www.aadvantagehotels.com/ | https://hotels.spirit.com/ | |
| https://www.hilton.com/ | https://www.southwesthotels.com/ | |
| https://travelsecure.chase.com/ | https://www.marriott.com/ | |
| https://www.ihg.com/ | https://www.hyatt.com/ | |
| https://lodash.com/ | https://openjsf.org/ |
Page 1 of 2
Raw Manifest
{ "name": "__MSG_fullTitle__", "icons": { "16": "icon/16.png", "32": "icon/32.png", "48": "icon/48.png", "96": "icon/96.png", "128": "icon/128.png" }, "action": { "default_popup": "popup.html", "default_title": "__MSG_brandName__" }, "version": "2.0.1", "background": { "service_worker": "background.js" }, "update_url": "https://clients2.google.com/service/update2/crx", "description": "__MSG_heroPhrase__", "permissions": [ "storage" ], "default_locale": "en", "content_scripts": [ { "js": [ "content-scripts/content.js" ], "css": [ "content-scripts/content.css" ], "matches": [ "https://*.expedia.com/*", "https://*.expedia.net/*", "https://*.hotels.com/*", "https://*.hotels.ryanair.com/*", "https://*.hotels.united.com/*", "https://all.accor.com/*", "https://hotels.spirit.com/*", "https://travelsecure.chase.com/*", "https://vacation.hotwire.com/*", "https://vacations.alaskaair.com/*", "https://www.aadvantagehotels.com/*", "https://www.agoda.com/*", "https://www.amextravel.com/*", "https://www.booking.com/*", "https://www.choicehotels.com/*", "https://www.costcotravel.ca/*", "https://www.costcotravel.com/*", "https://www.expedia.at/*", "https://www.expedia.be/*", "https://www.expedia.ca/*", "https://www.expedia.ch/*", "https://www.expedia.co.id/*", "https://www.expedia.co.in/*", "https://www.expedia.co.jp/*", "https://www.expedia.co.kr/*", "https://www.expedia.co.nz/*", "https://www.expedia.co.th/*", "https://www.expedia.co.uk/*", "https://www.expedia.com.au/*", "https://www.expedia.com.br/*", "https://www.expedia.com.hk/*", "https://www.expedia.com.mx/*", "https://www.expedia.com.my/*", "https://www.expedia.com.ph/*", "https://www.expedia.com.sg/*", "https://www.expedia.com.tw/*", "https://www.expedia.de/*", "https://www.expedia.dk/*", "https://www.expedia.es/*", "https://www.expedia.fr/*", "https://www.expedia.ie/*", "https://www.expedia.it/*", "https://www.expedia.nl/*", "https://www.expedia.no/*", "https://www.expedia.se/*", "https://www.getdealminer.com/*", "https://www.hilton.com/*", "https://www.hoteis.com/*", "https://www.hoteles.com/*", "https://www.hotels.cn/*", "https://www.hotwire.com/*", "https://www.hyatt.com/*", "https://www.ihg.com/*", "https://www.marriott.com/*", "https://www.orbitz.com/*", "https://www.pinklemon.app/*", "https://www.priceline.com/*", "https://www.southwesthotels.com/*", "https://www.travelextras-delta.com/*", "https://www.travelocity.com/*", "https://www.vio.com/*", "https://www.wotif.com/*" ] } ], "host_permissions": [ "https://*/*" ], "manifest_version": 3, "web_accessible_resources": [ { "matches": [ "https://www.pinklemon.app/*", "https://www.getdealminer.com/*", "https://www.booking.com/*", "https://www.hoteles.com/*", "https://*.hotels.com/*", "https://www.hotels.cn/*", "https://www.hoteis.com/*", "https://www.orbitz.com/*", "https://www.travelocity.com/*", "https://www.wotif.com/*", "https://www.amextravel.com/*", "https://www.travelextras-delta.com/*", "https://*.hotels.united.com/*", "https://*.hotels.ryanair.com/*", "https://vacations.alaskaair.com/*", "https://www.costcotravel.com/*", "https://www.costcotravel.ca/*", "https://vacation.hotwire.com/*", "https://www.vio.com/*", "https://www.hotwire.com/*", "https://all.accor.com/*", "https://www.choicehotels.com/*", "https://*.expedia.com/*", "https://*.expedia.net/*", "https://www.expedia.ca/*", "https://www.expedia.co.uk/*", "https://www.expedia.de/*", "https://www.expedia.fr/*", "https://www.expedia.it/*", "https://www.expedia.es/*", "https://www.expedia.nl/*", "https://www.expedia.ie/*", "https://www.expedia.be/*", "https://www.expedia.at/*", "https://www.expedia.ch/*", "https://www.expedia.se/*", "https://www.expedia.dk/*", "https://www.expedia.no/*", "https://www.expedia.co.jp/*", "https://www.expedia.co.in/*", "https://www.expedia.co.th/*", "https://www.expedia.co.id/*", "https://www.expedia.co.kr/*", "https://www.expedia.co.nz/*", "https://www.expedia.com.au/*", "https://www.expedia.com.sg/*", "https://www.expedia.com.hk/*", "https://www.expedia.com.my/*", "https://www.expedia.com.ph/*", "https://www.expedia.com.tw/*", "https://www.expedia.com.mx/*", "https://www.expedia.com.br/*", "https://www.priceline.com/*", "https://www.agoda.com/*", "https://www.aadvantagehotels.com/*", "https://hotels.spirit.com/*", "https://www.hilton.com/*", "https://www.southwesthotels.com/*", "https://travelsecure.chase.com/*", "https://www.marriott.com/*", "https://www.ihg.com/*", "https://www.hyatt.com/*" ], "resources": [ "pink-lemon.js", "content-scripts/content.css" ] } ], "browser_specific_settings": { "gecko": { "id": "pinklemon@pinklemon.app" } } }
ⓘ CRXaminer has partnered with our friends at Secure Annex to provide additional findings unique to their platform.
Secure Annex also analyzes extensions from other browsers, IDEs, and can continuously monitor.
Loading Secure Annex data...
Unable to load Secure Annex data.
This extension may not yet be analyzed by Secure Annex.
Detections
0Critical
0
High
0
Medium
0
Low
0
Has Verdicts
Yes
Manifest Findings
0Critical
0
High
0
Medium
0
Low
0
Secure Annex analyzed version: -