Chrome Web Store

7Versions

1Code reviewed

No malware found

In code review (v1.0.0)

Our reviewer read version 1.0.0 — the most recent version we have reviewed — and found no malicious behaviour. The version shown here has not been individually reviewed yet.

10 indicators in this extension

10 indicators

1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99 Start 7-day trial — all reports

One-time payment · Secure checkout by Stripe

What our analysis found

CupWatch – FIFA World Cup 2026 Live Scores, Spoiler-Free showed no malicious code in Extension Auditor's review. It was last updated in July 2026.

Analyst notes

Every network call maps to a declared, legitimate purpose: ESPN API calls fetch data, Google News RSS fetches match-related headlines, and the single POST request originates from the bundled library creating an API key at [domain withheld] (a well-known open-source payment library for Chrome extensions). The content script runs exclusively on [domain withheld], which is required by the ExtPay integration to detect payment completion — not an attempt to inject code into arbitrary pages. The bundled manifest matches the published manifest exactly with no discrepancies. No user PII, browsing history, or page content is collected or exfiltrated anywhere in the codebase. The ML signals (js_post_requests, js_innerhtml, js_exclamation, large JS size) are entirely attributable to the library and normal side-panel UI rendering.

CupWatch – FIFA World Cup 2026 Live Scores, Spoiler-Free Chrome extension security report

ID: ddjpekhmijlkldkjbaklcmednkllkhfj

Supported Languages

🇺🇸English

Extension Info & Metadata

Status

Active

Version

1.4.1

Size

0.55 MB

Rating

5.0/5

Reviews

Users

190

Type

Extension

Updated

Jul 6, 2026

Publisher Contextual Analysis

Author: Muboxer Labs
Privacy: Privacy Policy
Help: Help Center
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes
Website: Visit

Extensions

Active

Obsolete

Listed

Unlisted

Users

190

Screenshots & videos

Install growth

User Growth

Showing data from Jun 10, 2026 to Oct 10, 2026

Versions

+152.63%(+116 users)

Compared to 3 months ago

7 versions released in this period

Rating Count

Total: 11 ratings

Average Rating

Current: 5.00 / 5.0+5.00

See plans

React Flow

Internal permhash`7431654850…`
No malicious matches

No other extension carries this fingerprint.

Permhash (Mandiant)`b86571383b…`
3 malicious

136 other extensions carry this fingerprint; 3 of the cluster are known malicious.

Withheldmalicious
Withheldmalicious
Withheldmalicious
Withheldnot flagged
Withheldnot flagged
Withheldnot flagged
Withheldnot flagged
+129 more

Network indicators

10 URLs and 0 IP literals were extracted from this version.

Item	Type	Severity	Description
Contextual Risk Factors	Risk Factor	High	The following context increases the overall risk:• 20% increase: Access to sensitive domains increases potential impact• 10% increase: Early script execution enables pre-emptive content manipulation
storage	Permission	Medium	This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
https://site.api.espn.com/*	Host	Medium	Host permission — access limited to this URL pattern.
https://site.web.api.espn.com/*	Host	Medium	Host permission — access limited to this URL pattern.
https://news.google.com/*	Host	Medium	Host permission — access limited to this URL pattern.
Access to Sensitive Domains	Risk Factor	Medium	This extension requests access to sensitive domains: https://news.google.com/*
Early Content Script Execution	Risk Factor	Medium	This extension runs content scripts at document_start.
alarms	Permission	Low	This permission schedules periodic tasks. Rated Low because it can only trigger events at specified times without access to sensitive data.
sidePanel	Permission	Low	This permission adds custom panels to the browser interface. Rated Low because it only affects browser UI elements and cannot access page content.

Sensitive Domain Access

This extension has access to the following sensitive domains:

https://news.google.com/*

10 indicators in this extension

10 indicators

1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99 Start 7-day trial — all reports

One-time payment · Secure checkout by Stripe

About this extension

World Cup 2026 companion. Live scores when you want them. Spoiler-free when you don't.

Read the publisher’s full description

CupWatch is a lightweight browser companion for following the 2026 World Cup from your Chrome side panel. Track matches, live scores, standings, favorite teams, saved matches, and match details without opening a full sports website. CupWatch is built for fans who want quick updates when watching live, and spoiler protection when catching up later. Features: - Today’s matches with local kickoff times - Full match schedule - Live scores and match status - Match details with timeline, stats, lineups, and news - Group tables and knockout view - Favorite team filtering - Saved matches - Spoiler-Free Mode to hide scores and sensitive match details - Pro reminders and alerts - Calendar export for matches CupWatch Pro is a one-time World Cup 2026 pass that unlocks kickoff reminders, goal alerts, full-time alerts, and calendar export. CupWatch is an independent project and is not affiliated with or endorsed by FIFA, the World Cup, or any official tournament organizer.

User reviews

5.0 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

I've really enjoyed using CupWatch. Makes it easy to keep up with the World Cup without opening a bunch of tabs. The spoiler-free mode is a great touch, and having live scores, standings, and match details all in the side panel is really convenient. Highly recommended for any football fan.

Masud Sheikh·27 Jun 2026

I've tried a few score-tracking tools, and CupWatch is by far the most convenient. Having live soccer scores available right from the toolbar saves me so much time during match days. It's clear a lot of thought went into making this both simple and genuinely useful. A well-deserved 5 stars. Thank you to the developer, and looking forward to future updates! ⚽⚽⚽

Name Trading·24 Jun 2026

Cup Watch is a clean, easy-to-use Chrome extension for soccer fans—your one-stop tracker for live scores, match updates, and fixtures, all in one place. Good luck with Cup Watch! Enjoy while you are working.

Extension files

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found

No IP addresses found

10 indicators in this extension

10 indicators

1 version analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99 Start 7-day trial — all reports

One-time payment · Secure checkout by Stripe

Version	Size	Verdict	Findings	Permhash
1.4.1 Latest	0.55 MB	Not scanned	—	b86571383bbfef413f4e70c8dc6d22c9f863390cede965747521936342dda5af
1.4.0	0.55 MB	Not scanned	—	b86571383bbfef413f4e70c8dc6d22c9f863390cede965747521936342dda5af
1.3.1	0.55 MB	Not scanned	—	b86571383bbfef413f4e70c8dc6d22c9f863390cede965747521936342dda5af
1.3.0	0.55 MB	Not scanned	—	b86571383bbfef413f4e70c8dc6d22c9f863390cede965747521936342dda5af
1.2.0	0.55 MB	Not scanned	—	b86571383bbfef413f4e70c8dc6d22c9f863390cede965747521936342dda5af
1.1.0	0.54 MB	Not scanned	—	b86571383bbfef413f4e70c8dc6d22c9f863390cede965747521936342dda5af
1.0.0	0.46 MB	No malware found	0	b86571383bbfef413f4e70c8dc6d22c9f863390cede965747521936342dda5af

Showing 1 to 7 of 10 rows

Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

Gain full insight into all external connections.

Upgrade for full visibility.

Popular in Entertainment

Microsoft Edge Flash Player28,042,555 users
Netflix Party is now Teleparty10,000,000 users
Netflix Party is now Teleparty2,359,777 users
Microsoft Multimedia Redirection1,232,737 users
AHA Music - Song Finder for Browser1,000,000 users

No malware found

10 indicators in this extension

What our analysis found