Chrome Web Store
6Versions
0Code reviewed

Not reviewed

No code review on record

We have not reviewed this extension’s code, so we cannot vouch for it either way. Check the permissions below to decide whether it asks for more than it needs.

Want us to read this extension's code? Ask for a review and we'll queue it.

55 indicators in this extension

55 indicators
0 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

What our analysis found

Card Index — Whatnot card scanner is not yet reviewed by Extension Auditor. Its permissions mean it can inject scripts into pages. It was last updated in October 2026.

Card Index — Whatnot card scanner

Card Index — Whatnot card scanner Chrome extension security report

ID: impoppkbagmiajilcfbnbepdohahjmff

Supported Languages

🇺🇸English

Extension Info & Metadata

Status
Active
Version
1.3.0
Size
0.28 MB
Rating
5.0/5
Reviews
1
Users
628
Type
Extension
Updated
Oct 13, 2026
Category
Shopping
Price
Free
Featured
No
Visibility
Listed
Mature
No
By Google
No
Trusted
No
This publisherTrack record
1extension
All still listed

Publisher Contextual Analysis

Author
cardindex.com
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
Yes
Mailbox exists
Yes
Extensions
1
Active
1
Obsolete
0
Listed
1
Unlisted
0
Users
628

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Screenshots & videos

Screenshot 1

Install growth

Item
Type
Severity
Description
scripting
Permission
Critical
This permission allows injection and execution of JavaScript on any webpage. Rated Critical because it can modify page content, steal sensitive data, and inject malicious code into any site the extension has access to.
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
activeTab
Permission
Medium
This permission grants temporary access to the current tab. Rated Medium because it can access current page content when invoked, though limited to user-initiated actions.
https://www.whatnot.com/*
Host
Medium
Host permission — access limited to this URL pattern.
https://whatnot.com/*
Host
Medium
Host permission — access limited to this URL pattern.
https://cardindex.com/*
Host
Medium
Host permission — access limited to this URL pattern.
alarms
Permission
Low
This permission schedules periodic tasks. Rated Low because it can only trigger events at specified times without access to sensitive data.

55 indicators in this extension

55 indicators
0 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

About this extension

Identify cards during Whatnot live streams and see market value, graded prices, population and a suggested max bid.

Read the publisher’s full description

Card Index tells you what a card is worth while the Whatnot auction is running. Open a Whatnot live stream, click the Card Index icon, and a small floating panel appears on top of the page. When a card comes up, hit "Identify Card." The extension reads the frame currently on screen, identifies the card, and shows you what it's actually worth — before you bid. WHAT YOU GET ON EVERY SCAN • Suggested max bid — a single number, set at 80% of market value for the condition the card is actually in, so you have a walk-away price. • Market value by condition — raw plus a graded ladder (PSA, BGS, CGC and more), each with its 30-day move. Tap any condition to re-price everything below it. • 3-month price chart — see whether the card is climbing or sliding before you commit. • Recent sold comps — real completed sales, deduplicated across marketplaces so the same sale never shows up twice. • Population counts — how many copies exist at each grade, per grading company, with the detected grade highlighted. • Slab detection — if the card is in a graded case, we read the company and grade off the label and price it as that slab instead of raw. • Other possible matches — when a card is ambiguous, you see the runners-up instead of a single confident guess. BUILT FOR LIVE BIDDING The panel floats over the stream instead of pushing it aside, so the video never shrinks. Drag it anywhere and it stays there. Click the toolbar icon again to dismiss it. It hides itself for the split second it takes to read the frame, so it never ends up in its own screenshot. PRICING Free accounts get 3 scans per day, with remaining credits shown in the panel. Credits reset daily at midnight UTC. Pro accounts scan without limits. Your Card Index account works across the extension, the mobile app and cardindex.com — sign in once on the website and the extension picks it up. WHAT IT ACCESSES, AND WHY Card Index only runs on Whatnot. To identify a card, it captures the visible area of the stream you're watching, crops it to the video player, and sends that single image to the Card Index service for identification. Nothing is captured until you click "Identify Card." It does not record video, does not run in the background, and does not read your browsing on any other site.

User reviews

Extension files

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs
55

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found
No IP addresses found

55 indicators in this extension

55 indicators
0 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe
Version
Size
Verdict
Findings
Permhash
1.3.0
Latest
0.28 MBNot scanned—
421bee1e158b69c729ab64d16f076e14c6580aa148ee37faa2e16ab5fe78f887
1.2.0
0.28 MBNot scanned—
421bee1e158b69c729ab64d16f076e14c6580aa148ee37faa2e16ab5fe78f887
1.1.1
0.27 MBNot scanned—
421bee1e158b69c729ab64d16f076e14c6580aa148ee37faa2e16ab5fe78f887
1.0.2
0.27 MBNot scanned—
421bee1e158b69c729ab64d16f076e14c6580aa148ee37faa2e16ab5fe78f887
1.0.1
0.27 MBNot scanned—
421bee1e158b69c729ab64d16f076e14c6580aa148ee37faa2e16ab5fe78f887
1.0.0
0.27 MBNot scanned—
421bee1e158b69c729ab64d16f076e14c6580aa148ee37faa2e16ab5fe78f887
Showing 1 to 6 of 10 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.