Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: AVinfo - проверка истории автомобилей

CRITICAL RISKRemoved from Chrome Web Store

AVinfo - проверка истории автомобилей

ID: apjghppkbcnmhclnakegnnljkpiohblf

Could be malicious

Supported Languages

🇷🇺Russian

Extension Info & Metadata

Status

Removed

Version

14.9

Size

0.60 MB

Rating

3.5/5

Reviews

187

Users

10,000

Type

Extension

Updated

Nov 28, 2024

Publisher Contextual Analysis

Author: https://avinfo.infoView Profile
Privacy: Privacy Policy
Help: Help Center
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes
Website: Visit

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

10,000

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Проверка продавца автомобиля по объявлению, госномеру или VIN-коду автомобиля.

Это расширение покажет скрытые подробности для каждого объявления о продаже подержанного автомобиля на любом из популярных в России сайтов (auto.ru, drom.ru, avito.ru, youla.ru и другие). Узнать историю изменения цены на автомобиль, посмотреть другие объявления и телефонные номера продавца. Самая полная история автомобиля доступна в телеграмм-боте: https://t.me/avinfo Агрегатор бесплатных объявлений: https://tronk.pro

User Growth

Showing data from Jan 01, 2022 to Dec 31, 2022

Versions

No change in user count

Compared to 4 months ago

1 version released in this period

Rating Count

Total: 184 ratings

Average Rating

Current: 3.47 / 5.0

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical2

High3

Medium0

Low0

Versions scanned

Showing 1 of 26 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
14.3 Code review	5

Extension Version	Code Review Findings
14.3	5

Files with findings

3 distinct paths — top paths by unique finding count:

common.js3
av100redirects/av100ru-redirect.js1
content-files/avito.js1

S.No.	Category	Severity	File	Summary	Found in Version
1	Phishing	critical	av100redirects/av100ru-redirect.js (line 121)	This is one of 29 nearly identical redirect scripts in the av100redirects/ directory that hijack navigation. Each script targets a different legitimate Russian car-history-check site (av100.ru, av100.info, avinfo.pro,…	14.3
2	Remote Code Loading	critical	common.js (line 283)	The raw response body returned by tronk.ru is wrapped and injected into the third-party page DOM via insertAdjacentHTML with no sanitization, escaping, or schema validation. Whoever controls tronk.ru can deliver arbit…	14.3
3	Data Exfiltration	high	common.js (line 351)	User-typed comment text bound to a third-party listing's offerid is POSTed to tronk.ru with cookies attached. The 'offerid' is read from a button injected by the server response (#btnSendCommentAvInfo), so the same re…	14.3
4	Tracking	high	content-files/avito.js (line 640)	Each per-site content script (avito.js, auto.js, drom.js, youla.js, bibika.js, car.js, avtomarket.js, automall42.js, automama.js, autosale.js, autospot.js, avilon.js, avilon-trade.js, avtomir.js, avtodom.js, avtoruss-…	14.3
5	Unauthorized Data Collection	high	common.js (line 221)	Every visit to a covered car-classified site (auto.ru, avito.ru, drom.ru, youla.ru, bibika.ru, car.ru, dozens of dealer sites) triggers a credentialed GET to tronk.ru carrying the full visited URL, the listing key ext…	14.3

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

102

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


www.w3.org	/1999/02/22-rdf-syntax-ns	http://www.w3.org/1999/02/22-rdf-syntax-ns#
ns.adobe.com	/xap/1.0/	http://ns.adobe.com/xap/1.0/
ns.adobe.com	/xap/1.0/mm/	http://ns.adobe.com/xap/1.0/mm/
ns.adobe.com	/xap/1.0/sType/ResourceRef	http://ns.adobe.com/xap/1.0/sType/ResourceRef#
github.com	/ForbesLindesay/umd/blob/master/template.js	https://github.com/ForbesLindesay/umd/blob/master/template.js
xn--90adear.xn--p1ai	/check/	https://xn--90adear.xn--p1ai/check/
www.reestr-zalogov.ru	-	https://www.reestr-zalogov.ru/
github.com	/facebook/regenerator/blob/main/LICENSE	https://github.com/facebook/regenerator/blob/main/LICENSE
github.com	/facebook/regenerator/blob/main/packages/runtime/runtime.js	https://github.com/facebook/regenerator/blob/main/packages/runtime/runtime.js#L736=
tronk.ru	/avinfo/v3/get.ashx	https://tronk.ru/avinfo/v3/get.ashx

Showing 1 to 10 of 110 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No IP addresses found

4.6 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

Новая версия рсширения просто блеск! Удобнее стал дизайн, не сливается со страницей и работает стабильно, стало ��ораздо больше сайтов на которых оно работает. В общем, лайк))

ДЗ

Дмитрий Захаров·28 Dec 2023

Новая версия рсширения про��то блеск! Удобнее стал диза��, не сл��вается со страницей и работает стабильно, стало горазд�� больше сайтов на кот��рых оно работа��т. В общем, лайк))

ДЗ

Дмитрий Захаров·28 Dec 2023

Новая версия рсширения про��то блеск! Удобнее стал дизай��, не сливается со страницей и работает стабильно, стало горазд�� больше сайтов на кот��рых оно работа��т. В общем, лайк))

ДЗ

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

AVinfo - проверка истории автомобилей

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 26 Versions5

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating