# Crvtck.com-tracker in addons "Screengrab!" and "S3.Google Translator"

**URL:** <https://discourse.mozilla.org/t/crvtck-com-tracker-in-addons-screengrab-and-s3-google-translator/29095>\
**Category:** Add-ons\
**Tags:** privacysecurity\
**Created:** [June 2, 2018, 6:33pm UTC](https://discourse.mozilla.org/t/crvtck-com-tracker-in-addons-screengrab-and-s3-google-translator/29095 "2018-06-02T18:33:29Z")\
**Posts on this page:** 10\
**Page:** 1

<div class="post-metadata">

**Author:** ![dreieck](https://avatars.discourse-cdn.com/v4/letter/d/d26b3c/32.png) [@dreieck](https://discourse.mozilla.org/u/dreieck)\
**Post date:** [June 2, 2018, 6:33pm UTC](https://discourse.mozilla.org/t/crvtck-com-tracker-in-addons-screengrab-and-s3-google-translator/29095/1 "2018-06-02T18:33:29Z")

</div>

I have found trackers in the addons “Screengrab!” and “S3.Google Translator”:

The addon “S3.Google translator” (at least version 5.35) and “Screengrab (fix  
version)” (at least version 0.99.12) do contain a tracker. I tested with tis versions because I use Pale Moon browser, and not all Firefox addon (versions) are compatible with Pale Moon. But since it is a tracker I suspect it to be also in later versions and successor addons.

I report it here, to raise awareness for the responsible people so that they can investigate and take measures.

Here is what I observed:

When one of the addons is enabled, whenever I visit a new domain in a new tab (or revisit an  
old one after some longer time), this is logged to [crvtck.com](http://crvtck.com), possibly  
containing other data:

I see HTTP requests going out to URLs of the form

```
https://crvtck.com/get?key=<key>&out=https://kauflandstiftung.demdex.net&ref=https://www.kaufland.de&uid=o256&format=txt

```

`<key>` is a hex string with 32 characters.

---

<div class="post-metadata">

**Author:** ![dreieck](https://avatars.discourse-cdn.com/v4/letter/d/d26b3c/32.png) [@dreieck](https://discourse.mozilla.org/u/dreieck)\
**Post date:** [June 4, 2018, 1:23am UTC](https://discourse.mozilla.org/t/crvtck-com-tracker-in-addons-screengrab-and-s3-google-translator/29095/2 "2018-06-04T01:23:18Z")

</div>

… I also notice POST requests to [discount.s3blog.org](http://discount.s3blog.org):

```
http://discount.s3blog.org/addon.html?!POST:<string>
```

---

<div class="post-metadata">

**Author:** ![mozkewisch](https://sea1.discourse-cdn.com/flex001/user_avatar/discourse.mozilla.org/mozkewisch/32/40764_2.png) [@mozkewisch](https://discourse.mozilla.org/u/mozkewisch)\
**Post date:** [June 5, 2018, 8:50pm UTC](https://discourse.mozilla.org/t/crvtck-com-tracker-in-addons-screengrab-and-s3-google-translator/29095/3 "2018-06-05T20:50:05Z")

</div>

Thank you for the report. Please make sure you try this in the latest version though, as policy issues may have been fixed in the meanwhile.

For reporting policy violations, it is better to contact amo-admins [at] mozilla [dot] org. If you have any followup on this case please contact us via email.

---

<div class="post-metadata">

**Author:** ![dreieck](https://avatars.discourse-cdn.com/v4/letter/d/d26b3c/32.png) [@dreieck](https://discourse.mozilla.org/u/dreieck)\
**Post date:** [June 6, 2018, 9:46am UTC](https://discourse.mozilla.org/t/crvtck-com-tracker-in-addons-screengrab-and-s3-google-translator/29095/4 "2018-06-06T09:46:22Z")

</div>

Thank you for your answer.

I cannot test it with latest versions, since I  
use pale moon, and the latest versions are not combatible with pale moon  
(or the author just does not care to add compatibility information in  
the metadata).

And I don’t see it as my duty to take big extra measures (compile and  
install firefox, configure it, …) to test more; it was already some  
time to dig this one out and find a place where to report it.

Thank you for sending me the Email address to report policy violations.

On Tue, 5 Jun 2018 20:53:14 +0000, Philipp Kewisch  
[discourse@mozilla-community.org](mailto:discourse@mozilla-community.org) wrote about “Re: [Add-ons]  
Crvtck.com-tracker in addons “Screengrab!” and “S3.Google Translator””:

---

<div class="post-metadata">

**Author:** ![dreieck](https://avatars.discourse-cdn.com/v4/letter/d/d26b3c/32.png) [@dreieck](https://discourse.mozilla.org/u/dreieck)\
**Post date:** [June 28, 2018, 10:37am UTC](https://discourse.mozilla.org/t/crvtck-com-tracker-in-addons-screengrab-and-s3-google-translator/29095/5 "2018-06-28T10:37:52Z")

</div>

Reported.

Also going to public authorities responsible for privacy violations.

I am thinking to report this also to the public authority in charge for  
privacy violations. I think this is a privacy violation since data  
about which websites the user visits is sent to somewhere without the  
user beeing informed and presented with an opt-in. And this would mean  
that probably the Mozilla Foundation would me made responsible because  
they actively distribute the violating addon.

---

<div class="post-metadata">

**Author:** ![ironhair](https://avatars.discourse-cdn.com/v4/letter/i/3da27b/32.png) [@ironhair](https://discourse.mozilla.org/u/ironhair)\
**Post date:** [October 11, 2018, 10:54pm UTC](https://discourse.mozilla.org/t/crvtck-com-tracker-in-addons-screengrab-and-s3-google-translator/29095/6 "2018-10-11T22:54:13Z")

</div>

Why is this addon still operational? I can confirm the tracking is still going on, which is what made me google search ([http://discount.s3blog.org](http://discount.s3blog.org))  
How bad is this and do I need to cancel all my credit cards/change all my passwords?

---

<div class="post-metadata">

**Author:** ![dartraiden](https://avatars.discourse-cdn.com/v4/letter/d/ac91a4/32.png) [@dartraiden](https://discourse.mozilla.org/u/dartraiden)\
**Post date:** [December 13, 2018, 3:16pm UTC](https://discourse.mozilla.org/t/crvtck-com-tracker-in-addons-screengrab-and-s3-google-translator/29095/7 "2018-12-13T15:16:06Z")

</div>

Addon contains statistic collection, but this function is disabled by default  
So you enabled the collection of statistics and unhappy with this?

---

<div class="post-metadata">

**Author:** ![dreieck](https://avatars.discourse-cdn.com/v4/letter/d/d26b3c/32.png) [@dreieck](https://discourse.mozilla.org/u/dreieck)\
**Post date:** [December 15, 2018, 5:09pm UTC](https://discourse.mozilla.org/t/crvtck-com-tracker-in-addons-screengrab-and-s3-google-translator/29095/8 "2018-12-15T17:09:24Z")

</div>

It was enabled for me after install,

I had to manually deactivate it & firewall the requests.

Maybe in newer versions it is disabled by default?

On Thu, 13 Dec 2018 15:19:15 +0000, dartraiden  
[discourse@mozilla-community.org](mailto:discourse@mozilla-community.org) wrote about “Re: [Add-ons]  
Crvtck.com-tracker in addons “Screengrab!” and “S3.Google Translator””:

---

<div class="post-metadata">

**Author:** ![dartraiden](https://avatars.discourse-cdn.com/v4/letter/d/ac91a4/32.png) [@dartraiden](https://discourse.mozilla.org/u/dartraiden)\
**Post date:** [December 16, 2018, 1:21am UTC](https://discourse.mozilla.org/t/crvtck-com-tracker-in-addons-screengrab-and-s3-google-translator/29095/9 "2018-12-16T01:21:29Z")

</div>

It looks like you’re right. Newer versions immediately after installation open the page with the question “allow statistic collection or not?”

Btw, «S3.Google Translator» was removed from the AMO. Funny that it was removed at the very moment when it stopped collecting telemetry by default…

---

<div class="post-metadata">

**Author:** ![raynor01](https://sea1.discourse-cdn.com/flex001/user_avatar/discourse.mozilla.org/raynor01/32/31824_2.png) [@raynor01](https://discourse.mozilla.org/u/raynor01)\
**Post date:** [January 22, 2021, 10:12pm UTC](https://discourse.mozilla.org/t/crvtck-com-tracker-in-addons-screengrab-and-s3-google-translator/29095/10 "2021-01-22T22:12:42Z")

</div>

I would to use gain scrreengrab but it is not ther where it has been linked when other addons gets updated.