Is "Page Monitor & Alert" on Chrome Web Store Safe to Install?

[email protected] · chrome · v1.3.7

Page Monitor & Alert keeps an eye on any web page and notifies you the moment something changes. Select elements visually, compare content with a colored diff viewer, and trigger alerts on text, HTML, images, or numeric rules. Perfect for product restocks, scoreboards, job postings, price changes, and any page that matters to you. KEY FEATURES One-click visual selector — Pick elements directly on the page (no CSS knowledge required). Multiple trigger modes Any text change on the page Text of a specific element changes HTML of a specific element changes Image changes (by selector or by direct URL) Text equals value (exact match) Number satisfies rule (>, ≥, <, ≤, =) Diff viewer (colored) — See exactly what was removed/added between previous and current content. Alerts your way — Desktop notification, toolbar badge, sound beep, open viewer, Email (SMTP relay), Telegram. Multi-page monitoring — Add as many tasks as you need; each with its own URL, selector, frequency, and alert profile. Flexible scheduling — Choose the check frequency per task. Tab Reload fallback — If a site blocks direct fetches, the extension can reload the tab and read content via the content script. Auto-save & resume — If Chrome asks for extra permissions, your task draft is preserved and auto-saved after you grant them. Lightweight & private — Settings and tasks are stored locally in your browser. HOW IT WORKS (quick start) 1. Open the extension popup and click Pick element on page (or paste a URL). 2. Select the part of the page you want to watch; the selector and URL are filled automatically. 3. Choose a trigger mode (e.g., Text of selector changes or Number satisfies rule). 4. Set the Frequency and enable your preferred Alerts. 5. Click Add/Save task. You’re done! EMAIL & TELEGRAM (optional) Email (SMTP): Because browser extensions can’t send SMTP directly, you configure a tiny HTTPS relay (e.g., on Vercel using the included helper file) and enter your SMTP credentials (supports Gmail App Passwords). A one-click test is included. Telegram: Enter your Bot Token and Chat ID and send a test — no server required. PERMISSIONS Storage — Save your tasks and settings locally. Alarms — Schedule periodic checks. Notifications — Show desktop alerts. Offscreen — Parse HTML and play a short beep even when no tab is focused. Tabs & Scripting — Reload/read pages when using the “Use Tab Reload” fallback. Optional host permissions — Granted per-site only when you monitor that site. PRIVACY All tasks and settings are stored locally in your browser. The extension fetches page content only to compare snapshots for your triggers. Email requires an optional HTTPS relay you control; Telegram sends messages using the official Bot API with your token. No analytics, no ad tracking. FREE VS PRO Free: Minimum check interval is 60 seconds, all features available. Pro: Unlock faster intervals (<60s).

Risk Assessment

Analyzed
61.16
out of 100
MEDIUM

70 security findings detected across all analyzers

Chrome extension requesting 5 permissions

Severity Breakdown

0
Critical
27
High
43
Medium
0
Low
0
Info

Finding Categories

27
Malware Signatures
3
Network
38
IoC Indicators

YARA Rules Matched

7 rules(27 hits)
postinstall file manipulation postinstall crypto operations AlertStatementsShouldNotBeUsed postinstall network communication postinstall file download postinstall system command postinstall persistence mechanism

Requested Permissions

5 permissions
tabs
Medium
storage
Low
alarms
Low
notifications
Low
offscreen
Low

About This Extension

Page Monitor & Alert keeps an eye on any web page and notifies you the moment something changes. Select elements visually, compare content with a colored diff viewer, and trigger alerts on text, HTML, images, or numeric rules. Perfect for product restocks, scoreboards, job postings, price changes, and any page that matters to you. KEY FEATURES One-click visual selector — Pick elements directly on the page (no CSS knowledge required). Multiple trigger modes Any text change on the page Text of a specific element changes HTML of a specific element changes Image changes (by selector or by direct URL) Text equals value (exact match) Number satisfies rule (>, ≥, <, ≤, =) Diff viewer (colored) — See exactly what was removed/added between previous and current content. Alerts your way — Desktop notification, toolbar badge, sound beep, open viewer, Email (SMTP relay), Telegram. Multi-page monitoring — Add as many tasks as you need; each with its own URL, selector, frequency, and alert profile. Flexible scheduling — Choose the check frequency per task. Tab Reload fallback — If a site blocks direct fetches, the extension can reload the tab and read content via the content script. Auto-save & resume — If Chrome asks for extra permissions, your task draft is preserved and auto-saved after you grant them. Lightweight & private — Settings and tasks are stored locally in your browser. HOW IT WORKS (quick start) 1. Open the extension popup and click Pick element on page (or paste a URL). 2. Select the part of the page you want to watch; the selector and URL are filled automatically. 3. Choose a trigger mode (e.g., Text of selector changes or Number satisfies rule). 4. Set the Frequency and enable your preferred Alerts. 5. Click Add/Save task. You’re done! EMAIL & TELEGRAM (optional) Email (SMTP): Because browser extensions can’t send SMTP directly, you configure a tiny HTTPS relay (e.g., on Vercel using the included helper file) and enter your SMTP credentials (supports Gmail App Passwords). A one-click test is included. Telegram: Enter your Bot Token and Chat ID and send a test — no server required. PERMISSIONS Storage — Save your tasks and settings locally. Alarms — Schedule periodic checks. Notifications — Show desktop alerts. Offscreen — Parse HTML and play a short beep even when no tab is focused. Tabs & Scripting — Reload/read pages when using the “Use Tab Reload” fallback. Optional host permissions — Granted per-site only when you monitor that site. PRIVACY All tasks and settings are stored locally in your browser. The extension fetches page content only to compare snapshots for your triggers. Email requires an optional HTTPS relay you control; Telegram sends messages using the official Bot API with your token. No analytics, no ad tracking. FREE VS PRO Free: Minimum check interval is 60 seconds, all features available. Pro: Unlock faster intervals (<60s).

Detailed Findings

31 total

YARA Rule Matches

7 rules

Indicators of Compromise

Network indicators, suspicious strings, and potential IoCs extracted during analysis

URLs
10
IP Addresses
3
Domains
26
Strings
38

All Indicators · 38

IP
detected IP: 2::

XIOC detected IP: 2::

extracted_from_files

Domain
detected Domain: date.now

XIOC detected Domain: date.now

extracted_from_files

URL
detected URL: https://example.test'

XIOC detected URL: https://example.test'

extracted_from_files

URL
detected URL: https://your-project.vercel.app/api/send

XIOC detected URL: https://your-project.vercel.app/api/send

extracted_from_files

URL
detected URL: https://clients2.google.com/service/update2/crx

XIOC detected URL: https://clients2.google.com/service/update2/crx

extracted_from_files

URL
detected URL: https://example.com/page

XIOC detected URL: https://example.com/page

extracted_from_files

URL
detected URL: https://your-relay.example.com/send

XIOC detected URL: https://your-relay.example.com/send

extracted_from_files

URL
detected URL: https://onlinegratis.net/page-monitor.html

XIOC detected URL: https://onlinegratis.net/page-monitor.html

extracted_from_files

URL
detected URL: https://store.payproglobal.com/checkout?products[1][id]=117532

XIOC detected URL: https://store.payproglobal.com/checkout?products[1][id]=117532

extracted_from_files

Domain
detected Domain: clients2.google.com

XIOC detected Domain: clients2.google.com

extracted_from_files

Domain
detected Domain: api.telegram.org

XIOC detected Domain: api.telegram.org

extracted_from_files

Domain
detected Domain: alarms.map

XIOC detected Domain: alarms.map

extracted_from_files

Domain
detected Domain: a.name

XIOC detected Domain: a.name

extracted_from_files

Domain
detected Domain: task.id

XIOC detected Domain: task.id

extracted_from_files

Domain
detected Domain: msg.id

XIOC detected Domain: msg.id

extracted_from_files

Domain
detected Domain: location.search

XIOC detected Domain: location.search

extracted_from_files

URL
detected URL: https://vercel.com

XIOC detected URL: https://vercel.com

extracted_from_files

Domain
detected Domain: your-relay.example.com

XIOC detected Domain: your-relay.example.com

extracted_from_files

Domain
detected Domain: onlinegratis.net

XIOC detected Domain: onlinegratis.net

extracted_from_files

Domain
detected Domain: store.payproglobal.com

XIOC detected Domain: store.payproglobal.com

extracted_from_files

Domain
detected Domain: d.id

XIOC detected Domain: d.id

extracted_from_files

Domain
detected Domain: d.alerts.email

XIOC detected Domain: d.alerts.email

extracted_from_files

Domain
detected Domain: t.id

XIOC detected Domain: t.id

extracted_from_files

Domain
detected Domain: tab.id

XIOC detected Domain: tab.id

extracted_from_files

Domain
detected Domain: your-project.vercel.app

XIOC detected Domain: your-project.vercel.app

extracted_from_files

Domain
detected Domain: vercel.com

XIOC detected Domain: vercel.com

extracted_from_files

Domain
detected Domain: smtp.gmail.com

XIOC detected Domain: smtp.gmail.com

extracted_from_files

Domain
detected Domain: x.bz

XIOC detected Domain: x.bz

extracted_from_files

Domain
detected Domain: e.fi

XIOC detected Domain: e.fi

extracted_from_files

URL
detected URL: https://...)'

XIOC detected URL: https://...)'

extracted_from_files

Domain
detected Domain: example.com

XIOC detected Domain: example.com

extracted_from_files

IP
detected IP: 1::

XIOC detected IP: 1::

extracted_from_files

Domain
detected Domain: el.id

XIOC detected Domain: el.id

extracted_from_files

Domain
detected Domain: pmoverlay.style

XIOC detected Domain: pmoverlay.style

extracted_from_files

IP
detected Domain: pmtooltip.style

XIOC detected Domain: pmtooltip.style

extracted_from_files

Domain
detected Domain: e.target

XIOC detected Domain: e.target

extracted_from_files

Domain
detected Domain: r.top

XIOC detected Domain: r.top

extracted_from_files

URL
detected URL: https://api.telegram.org/bot$

XIOC detected URL: https://api.telegram.org/bot$

extracted_from_files

Security Analysis Summary

Security Analysis Overview

Page Monitor & Alert is a Chrome Web Store extension published by [email protected]. Version 1.3.7 has been analyzed by the Risky Plugins security platform, receiving a risk score of 61.16/100 (MEDIUM risk) based on 70 security findings.

Risk Assessment

This extension presents high security risk. Significant concerns were identified during analysis. It is not recommended for use in sensitive or production environments without thorough review.

Findings Breakdown

  • High: 27 finding(s)
  • Medium: 43 finding(s)

What Was Analyzed

The security assessment covers multiple analysis categories:

  • Malware Detection: YARA rule matching against 2,400+ malware signatures
  • Secret Detection: Scanning for exposed API keys, tokens, and credentials
  • Static Analysis: Code-level security analysis for common vulnerability patterns
  • Network Analysis: Detection of suspicious network communications and endpoints
  • Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

Page Monitor & Alert is published by [email protected] on the Chrome Web Store marketplace. The extension has approximately 288 users.

Recommendation

This extension is not recommended for installation without thorough manual review. Consider alternatives with lower risk scores, or contact the developer to address the identified security concerns.

Frequently Asked Questions