Extension Auditor
Extension Auditor
Sign Up

URL Redirect and Login

ID: gnonimedfeaadngdaodkpihbingacill

Could be malicious

Supported Languages

🇺🇸English

Extension Info & Metadata

Status
Removed
Version
1.2
Size
0.04 MB
Rating
0.0/5
Reviews
0
Users
3
Type
Extension
Updated
Apr 11, 2024
Category
Productivity Developer
Price
Free
Featured
No
Visibility
Listed
Mature
No
By Google
No
Trusted
No
Download CRX
Chrome Web Store
Report Issue

Publisher Contextual Analysis

Author
tokenView Profile
Privacy
Privacy Policy
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
No
Mailbox exists
Yes
Total Extensions
5
Active
2
Obsolete
3
Listed
5
Unlisted
0
Total Users
94

The "login_automater" Chrome extension facilitates both automatic login and manual cookie copying for GRUBHUB, UBEREATS and…

The "login_automater" Chrome extension facilitates both automatic login and manual cookie copying for GRUBHUB, UBEREATS and DOORDASH platforms.

Item
Type
Severity
Description
declarativeNetRequestWithHostAccess
Permission
Critical
This permission combines network request modification with host permissions. Rated Critical because it can modify requests for specific domains, potentially targeting sensitive websites with precise attack rules.
declarativeNetRequest
Permission
Critical
This permission allows the extension to define rules to block, redirect, or modify network requests. Rated Critical because it can control all network traffic, potentially blocking security updates or redirecting to malicious sites.
cookies
Permission
High
This permission provides full access to read and modify browser cookies. Rated High because it can steal session tokens, modify authentication cookies, and compromise accounts across websites.
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
declarativeNetRequestFeedback
Permission
Medium
This permission provides network request modification logs. Rated Medium because it can monitor network request changes and debug traffic modifications.
http://debug.loopapplication.xyz/*
Host
Medium
Host permission — access limited to this URL pattern.
https://debug.loopapplication.xyz/*
Host
Medium
Host permission — access limited to this URL pattern.
https://internal.loopapplication.xyz/*
Host
Medium
Host permission — access limited to this URL pattern.
https://merchants.ubereats.com/*
Host
Medium
Host permission — access limited to this URL pattern.
https://auth.uber.com/*
Host
Medium
Host permission — access limited to this URL pattern.
https://*.doordash.com/*
Host
Medium
Host permission — access limited to this URL pattern.
https://identity.doordash.com/*
Host
Medium
Host permission — access limited to this URL pattern.
https://restaurant.grubhub.com/*
Host
Medium
Host permission — access limited to this URL pattern.
URLs
23
IPv4
0
IPv6
0

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

Gain full insight into all external connections.

Upgrade for full visibility.

Sign In
debug.loopapplication.xyz/username=x&platform=y&password=zhttp://debug.loopapplication.xyz/username=x&platform=y&password=z
restaurant.grubhub.com/dashboard/$%7Bstore_id%7D%60;https://restaurant.grubhub.com/dashboard/${store_id}`;
www.doordash.com/merchant/summaryhttps://www.doordash.com/merchant/summary?store_id=${store_id}`;
merchants.ubereats.com/manager/home/$%7Bstore_id%7D%60,https://merchants.ubereats.com/manager/home/${store_id}`,
api.loopapplication.xyz/get_last_uber_otphttps://api.loopapplication.xyz/get_last_uber_otp?username=${encodeURIComponent(
api.loopapplication.xyz/get_last_otphttps://api.loopapplication.xyz/get_last_otp?username=${encodeURIComponent(
clients2.google.com/service/update2/crxhttps://clients2.google.com/service/update2/crx
merchants.ubereats.com/*https://merchants.ubereats.com/*
auth.uber.com/*https://auth.uber.com/*
www.doordash.com/*https://www.doordash.com/*
Showing 1 to 10 of 30 rows
Rows per page:

Gain full insight into all external connections.

Upgrade for full visibility.

Sign In
No IP addresses found
Showing 1 to 3 of 10 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files (scanned top 25 shared text files)

No comparable text files found between these versions.

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

Sign In