Is "RoTrade - Roblox Trading Automated" on Chrome Web Store Safe to Install?

[email protected] · chrome · v1.2.10

RoTrade is a lightweight browser extension designed to help Roblox traders find and send trades faster and more efficiently. Instead of manually searching for potential trading partners, RoTrade lets you generate trade ideas and automatically finds users who own matching limited items. Once trade pairs are generated, you can send trades one by one with a single click, with the trade details automatically filled in for you. Key Features Automatic Trade Pair Finder Generate trades and instantly discover users who own compatible limited items. One-Click Trade Sending Send trades to generated pairs individually with pre-filled trade details. Semi-Automated Workflow RoTrade adds a dedicated “Auto Trades” tab to the Roblox trading interface, keeping you fully in control at all times. Trusted Trading Data Uses public Roblox data along with Rolimons values, RAP, and limited item information. Clean & Lightweight Interface No ads, no clutter, and no unnecessary features — just a fast and focused trading experience. Privacy & Security RoTrade operates entirely within your existing Roblox session. It does not collect or store login credentials and does not transmit sensitive personal information. All trading actions are handled through Roblox’s own systems, and any external requests only use public data such as user IDs and item IDs. Who Is RoTrade For? RoTrade is built specifically for Roblox traders who want a faster and more organized way to find trading opportunities without sacrificing control or safety.

Risk Assessment

Analyzed
100
out of 100
CRITICAL

406 security findings detected across all analyzers

Chrome extension requesting 10 permissions

Severity Breakdown

0
Critical
0
High
217
Medium
189
Low
0
Info

Finding Categories

23
Network
190
IoC Indicators

YARA Rules Matched

11 rules(189 hits)
postinstall file download postinstall system command postinstall crypto operations NoUseWeakRandom postinstall network communication postinstall file manipulation postinstall registry modification postinstall obfuscation LocalStorageShouldNotBeUsed postinstall persistence mechanism SQLInjection

Requested Permissions

10 permissions
activeTab
Medium
storage
Low
*://www.roblox.com/*
Low
*://api.rolimons.com/*
Low
*://roautotrade.com/*
Low
*://users.roblox.com/*
Low
*://inventory.roblox.com/*
Low
*://thumbnails.roblox.com/*
Low
*://auth.roblox.com/*
Low
*://trades.roblox.com/*
Low

About This Extension

RoTrade is a lightweight browser extension designed to help Roblox traders find and send trades faster and more efficiently. Instead of manually searching for potential trading partners, RoTrade lets you generate trade ideas and automatically finds users who own matching limited items. Once trade pairs are generated, you can send trades one by one with a single click, with the trade details automatically filled in for you. Key Features Automatic Trade Pair Finder Generate trades and instantly discover users who own compatible limited items. One-Click Trade Sending Send trades to generated pairs individually with pre-filled trade details. Semi-Automated Workflow RoTrade adds a dedicated “Auto Trades” tab to the Roblox trading interface, keeping you fully in control at all times. Trusted Trading Data Uses public Roblox data along with Rolimons values, RAP, and limited item information. Clean & Lightweight Interface No ads, no clutter, and no unnecessary features — just a fast and focused trading experience. Privacy & Security RoTrade operates entirely within your existing Roblox session. It does not collect or store login credentials and does not transmit sensitive personal information. All trading actions are handled through Roblox’s own systems, and any external requests only use public data such as user IDs and item IDs. Who Is RoTrade For? RoTrade is built specifically for Roblox traders who want a faster and more organized way to find trading opportunities without sacrificing control or safety.

Detailed Findings

212 total

YARA Rule Matches

11 rules

Indicators of Compromise

Network indicators, suspicious strings, and potential IoCs extracted during analysis

URLs
37
IP Addresses
10
Domains
145
Strings
190

All Indicators · 190

Domain
detected Domain: requiredfields.map

XIOC detected Domain: requiredfields.map

extracted_from_files

Domain
detected Domain: twostepverification.roblox.com

XIOC detected Domain: twostepverification.roblox.com

extracted_from_files

Domain
detected Domain: notification.style

XIOC detected Domain: notification.style

extracted_from_files

IP
detected IP: 58::

XIOC detected IP: 58::

extracted_from_files

IP
detected IP: ::e

XIOC detected IP: ::e

extracted_from_files

IP
detected IP: e::af

XIOC detected IP: e::af

extracted_from_files

IP
detected IP: ed::af

XIOC detected IP: ed::af

extracted_from_files

IP
detected IP: d::

XIOC detected IP: d::

extracted_from_files

IP
detected IP: ::af

XIOC detected IP: ::af

extracted_from_files

URL
detected Domain: purl.org

XIOC detected Domain: purl.org

extracted_from_files

Domain
detected Domain: ns.adobe.com

XIOC detected Domain: ns.adobe.com

extracted_from_files

Domain
detected Domain: www.w3.org

XIOC detected Domain: www.w3.org

extracted_from_files

Domain
detected Domain: m.rs

XIOC detected Domain: m.rs

extracted_from_files

Domain
detected Domain: chromewebstore.google.com

XIOC detected Domain: chromewebstore.google.com

extracted_from_files

Domain
detected Domain: creativecommons.org

XIOC detected Domain: creativecommons.org

extracted_from_files

IP
detected IP: 8::2

XIOC detected IP: 8::2

extracted_from_files

Domain
detected Domain: date.now

XIOC detected Domain: date.now

extracted_from_files

Domain
detected Domain: playerassetscache.map

XIOC detected Domain: playerassetscache.map

extracted_from_files

Domain
detected Domain: inventorycache.map

XIOC detected Domain: inventorycache.map

extracted_from_files

Domain
detected Domain: commonownerscache.map

XIOC detected Domain: commonownerscache.map

extracted_from_files

Domain
detected Domain: roautotrade.com

XIOC detected Domain: roautotrade.com

extracted_from_files

Domain
detected Domain: n.nu

XIOC detected Domain: n.nu

extracted_from_files

Domain
detected Domain: tracker-notification.mp

XIOC detected Domain: tracker-notification.mp

extracted_from_files

Domain
detected Domain: thumbnails.roblox.com

XIOC detected Domain: thumbnails.roblox.com

extracted_from_files

Domain
detected Domain: cacheentry.data

XIOC detected Domain: cacheentry.data

extracted_from_files

Domain
detected Domain: api.rolimons.com

XIOC detected Domain: api.rolimons.com

extracted_from_files

Domain
detected Domain: result.data

XIOC detected Domain: result.data

extracted_from_files

Domain
detected Domain: batch.map

XIOC detected Domain: batch.map

extracted_from_files

Domain
detected Domain: data.data

XIOC detected Domain: data.data

extracted_from_files

Domain
detected Domain: cached.data

XIOC detected Domain: cached.data

extracted_from_files

Domain
detected Domain: child.id

XIOC detected Domain: child.id

extracted_from_files

Domain
detected Domain: accountdata.storage

XIOC detected Domain: accountdata.storage

extracted_from_files

Domain
detected Domain: validated.data

XIOC detected Domain: validated.data

extracted_from_files

Domain
detected Domain: inventory.roblox.com

XIOC detected Domain: inventory.roblox.com

extracted_from_files

Domain
detected Domain: users.roblox.com

XIOC detected Domain: users.roblox.com

extracted_from_files

Domain
detected Domain: trades.roblox.com

XIOC detected Domain: trades.roblox.com

extracted_from_files

Domain
detected Domain: auth.roblox.com

XIOC detected Domain: auth.roblox.com

extracted_from_files

Domain
detected Domain: hasharray.map

XIOC detected Domain: hasharray.map

extracted_from_files

Domain
detected Domain: tradedata.id

XIOC detected Domain: tradedata.id

extracted_from_files

Domain
detected Domain: item.name

XIOC detected Domain: item.name

extracted_from_files

Domain
detected Domain: tradedata.giving

XIOC detected Domain: tradedata.giving

extracted_from_files

Domain
detected Domain: tradedata.name

XIOC detected Domain: tradedata.name

extracted_from_files

Domain
detected Domain: 2fwww.w3.org

XIOC detected Domain: 2fwww.w3.org

extracted_from_files

Domain
detected Domain: style.id

XIOC detected Domain: style.id

extracted_from_files

Domain
detected Domain: user.name

XIOC detected Domain: user.name

extracted_from_files

Domain
detected Domain: user.id

XIOC detected Domain: user.id

extracted_from_files

Domain
detected Domain: a.id

XIOC detected Domain: a.id

extracted_from_files

Domain
detected Domain: users.map

XIOC detected Domain: users.map

extracted_from_files

Domain
detected Domain: data.data.map

XIOC detected Domain: data.data.map

extracted_from_files

Domain
detected Domain: response.data.id

XIOC detected Domain: response.data.id

extracted_from_files

Domain
detected Domain: response.data

XIOC detected Domain: response.data

extracted_from_files

Domain
detected Domain: rolimonscache.data

XIOC detected Domain: rolimonscache.data

extracted_from_files

Domain
detected Domain: keys.map

XIOC detected Domain: keys.map

extracted_from_files

Domain
detected Domain: module.dependencies.map

XIOC detected Domain: module.dependencies.map

extracted_from_files

Domain
detected Domain: window.storage

XIOC detected Domain: window.storage

extracted_from_files

Domain
detected Domain: error.name

XIOC detected Domain: error.name

extracted_from_files

Domain
detected Domain: errorinfo.name

XIOC detected Domain: errorinfo.name

extracted_from_files

Domain
detected Domain: parent.id

XIOC detected Domain: parent.id

extracted_from_files

IP
detected Domain: script.id

XIOC detected Domain: script.id

extracted_from_files

Domain
detected Domain: rolimons.com

XIOC detected Domain: rolimons.com

extracted_from_files

Domain
detected Domain: text-robux.ng

XIOC detected Domain: text-robux.ng

extracted_from_files

Domain
detected Domain: notification.mp

XIOC detected Domain: notification.mp

extracted_from_files

Domain
detected Domain: www.roblox.com

XIOC detected Domain: www.roblox.com

extracted_from_files

IP
detected IP: ::

XIOC detected IP: ::

extracted_from_files

URL
detected URL: https://www.roblox.com/auto-trades',

XIOC detected URL: https://www.roblox.com/auto-trades',

extracted_from_files

URL
detected URL: https://roautotrade.com',

XIOC detected URL: https://roautotrade.com',

extracted_from_files

URL
detected URL: https://thumbnails.roblox.com/v1/assets?assetIds=$

XIOC detected URL: https://thumbnails.roblox.com/v1/assets?assetIds=$

extracted_from_files

URL
detected URL: https://trades.roblox.com/v2/trades/send

XIOC detected URL: https://trades.roblox.com/v2/trades/send

extracted_from_files

URL
detected URL: https://apis.roblox.com/challenge/v1/continue',

XIOC detected URL: https://apis.roblox.com/challenge/v1/continue',

extracted_from_files

URL
detected URL: https://users.roblox.com/v1/users/$

XIOC detected URL: https://users.roblox.com/v1/users/$

extracted_from_files

URL
detected URL: https://trades.roblox.com/v1/trades/outbound?limit=$

XIOC detected URL: https://trades.roblox.com/v1/trades/outbound?limit=$

extracted_from_files

URL
detected URL: https://trades.roblox.com/v1/trades/$

XIOC detected URL: https://trades.roblox.com/v1/trades/$

extracted_from_files

URL
detected URL: https://www.roblox.com/auto-trades'

XIOC detected URL: https://www.roblox.com/auto-trades'

extracted_from_files

URL
detected URL: https://twostepverification.roblox.com/v1/users/$

XIOC detected URL: https://twostepverification.roblox.com/v1/users/$

extracted_from_files

URL
detected URL: https://clients2.google.com/service/update2/crx

XIOC detected URL: https://clients2.google.com/service/update2/crx

extracted_from_files

URL
detected URL: https://www.roblox.com/proofs'

XIOC detected URL: https://www.roblox.com/proofs'

extracted_from_files

URL
detected URL: https://www.roblox.com/users/$

XIOC detected URL: https://www.roblox.com/users/$

extracted_from_files

URL
detected URL: https://users.roblox.com/v1/users

XIOC detected URL: https://users.roblox.com/v1/users

extracted_from_files

URL
detected URL: https://thumbnails.roblox.com/v1/users/avatar-headshot?userIds=$

XIOC detected URL: https://thumbnails.roblox.com/v1/users/avatar-headshot?userIds=$

extracted_from_files

URL
detected URL: https://auth.roblox.com/v1/logout',

XIOC detected URL: https://auth.roblox.com/v1/logout',

extracted_from_files

URL
detected URL: https://trades.roblox.com/v1/users/$

XIOC detected URL: https://trades.roblox.com/v1/users/$

extracted_from_files

URL
detected URL: https://roautotrade.com/api/instance-ids

XIOC detected URL: https://roautotrade.com/api/instance-ids

extracted_from_files

URL
detected URL: https://roautotrade.com/api/auto-instance-ids

XIOC detected URL: https://roautotrade.com/api/auto-instance-ids

extracted_from_files

URL
detected URL: https://users.roblox.com/v1/users/authenticated

XIOC detected URL: https://users.roblox.com/v1/users/authenticated

extracted_from_files

URL
detected URL: https://inventory.roblox.com/v1/users/$

XIOC detected URL: https://inventory.roblox.com/v1/users/$

extracted_from_files

URL
detected URL: https://users.roblox.com/v1/users?userIds=$

XIOC detected URL: https://users.roblox.com/v1/users?userIds=$

extracted_from_files

URL
detected URL: http://ns.adobe.com/xmp/1.0/DynamicMedia/

XIOC detected URL: http://ns.adobe.com/xmp/1.0/DynamicMedia/

extracted_from_files

URL
detected URL: https://roautotrade.com'

XIOC detected URL: https://roautotrade.com'

extracted_from_files

URL
detected URL: https://roautotrade.com/api/common-owners?item_ids=$

XIOC detected URL: https://roautotrade.com/api/common-owners?item_ids=$

extracted_from_files

URL
detected URL: https://roautotrade.com/api/playerassets/$

XIOC detected URL: https://roautotrade.com/api/playerassets/$

extracted_from_files

URL
detected URL: https://roautotrade.com/api/messages/search/$

XIOC detected URL: https://roautotrade.com/api/messages/search/$

extracted_from_files

URL
detected URL: https://api.rolimons.com/items/v2/itemdetails

XIOC detected URL: https://api.rolimons.com/items/v2/itemdetails

extracted_from_files

Domain
detected Domain: audio.play

XIOC detected Domain: audio.play

extracted_from_files

URL
detected URL: http://www.w3.org/1999/02/22-rdf-syntax-ns#

XIOC detected URL: http://www.w3.org/1999/02/22-rdf-syntax-ns#

extracted_from_files

URL
detected URL: http://ns.adobe.com/xap/1.0/mm/

XIOC detected URL: http://ns.adobe.com/xap/1.0/mm/

extracted_from_files

URL
detected URL: http://ns.adobe.com/xap/1.0/sType/ResourceEvent#

XIOC detected URL: http://ns.adobe.com/xap/1.0/sType/ResourceEvent#

extracted_from_files

URL
detected URL: http://ns.adobe.com/xap/1.0/sType/ResourceRef#

XIOC detected URL: http://ns.adobe.com/xap/1.0/sType/ResourceRef#

extracted_from_files

URL
detected URL: http://purl.org/dc/elements/1.1/

XIOC detected URL: http://purl.org/dc/elements/1.1/

extracted_from_files

URL
detected URL: http://ns.adobe.com/xap/1.0/

XIOC detected URL: http://ns.adobe.com/xap/1.0/

extracted_from_files

Domain
detected Domain: batches.map

XIOC detected Domain: batches.map

extracted_from_files

Domain
detected Domain: element.dataset.id

XIOC detected Domain: element.dataset.id

extracted_from_files

Domain
detected Domain: currentpageopportunities.map

XIOC detected Domain: currentpageopportunities.map

extracted_from_files

Domain
detected Domain: timeoutresult.data

XIOC detected Domain: timeoutresult.data

extracted_from_files

Domain
detected Domain: failedusers.map

XIOC detected Domain: failedusers.map

extracted_from_files

Domain
detected Domain: userstoprocess.map

XIOC detected Domain: userstoprocess.map

extracted_from_files

URL
detected URL: https://creativecommons.org/licenses/by-nc/4.0/legalcode.txt

XIOC detected URL: https://creativecommons.org/licenses/by-nc/4.0/legalcode.txt

extracted_from_files

Domain
detected Domain: cancelbtnref.click

XIOC detected Domain: cancelbtnref.click

extracted_from_files

Domain
detected Domain: passwordinput.select

XIOC detected Domain: passwordinput.select

extracted_from_files

Domain
detected Domain: okbutton.click

XIOC detected Domain: okbutton.click

extracted_from_files

Domain
detected Domain: checkbox.id

XIOC detected Domain: checkbox.id

extracted_from_files

Domain
detected Domain: target.id

XIOC detected Domain: target.id

extracted_from_files

Domain
detected Domain: dialogs2fa.show

XIOC detected Domain: dialogs2fa.show

extracted_from_files

Domain
detected Domain: e.name

XIOC detected Domain: e.name

extracted_from_files

Domain
detected Domain: tradeinfo.id

XIOC detected Domain: tradeinfo.id

extracted_from_files

Domain
detected Domain: instanceresponse.data.trade

XIOC detected Domain: instanceresponse.data.trade

extracted_from_files

Domain
detected Domain: e.target.dataset.trading

XIOC detected Domain: e.target.dataset.trading

extracted_from_files

Domain
detected Domain: item.dataset.id

XIOC detected Domain: item.dataset.id

extracted_from_files

Domain
detected Domain: statscontainer.id

XIOC detected Domain: statscontainer.id

extracted_from_files

Domain
detected Domain: savebtn.click

XIOC detected Domain: savebtn.click

extracted_from_files

Domain
detected Domain: e.target

XIOC detected Domain: e.target

extracted_from_files

Domain
detected Domain: activecontainer.id

XIOC detected Domain: activecontainer.id

extracted_from_files

Domain
detected Domain: item.trade.id

XIOC detected Domain: item.trade.id

extracted_from_files

IP
detected IP: 8::

XIOC detected IP: 8::

extracted_from_files

Domain
detected Domain: notification.id

XIOC detected Domain: notification.id

extracted_from_files

Domain
detected Domain: clients2.google.com

XIOC detected Domain: clients2.google.com

extracted_from_files

Domain
detected Domain: typestyles.info

XIOC detected Domain: typestyles.info

extracted_from_files

Domain
detected Domain: receiving.map

XIOC detected Domain: receiving.map

extracted_from_files

Domain
detected Domain: userdata.name

XIOC detected Domain: userdata.name

extracted_from_files

Domain
detected Domain: cantraderesponse.data

XIOC detected Domain: cantraderesponse.data

extracted_from_files

Domain
detected Domain: instanceresponse.data

XIOC detected Domain: instanceresponse.data

extracted_from_files

Domain
detected Domain: responsedata.data.data

XIOC detected Domain: responsedata.data.data

extracted_from_files

Domain
detected Domain: responsedata.data

XIOC detected Domain: responsedata.data

extracted_from_files

Domain
detected Domain: apiresponse.data

XIOC detected Domain: apiresponse.data

extracted_from_files

Domain
detected Domain: pagedata.data

XIOC detected Domain: pagedata.data

extracted_from_files

Domain
detected Domain: container.style.gap

XIOC detected Domain: container.style.gap

extracted_from_files

Domain
detected Domain: opp.giving

XIOC detected Domain: opp.giving

extracted_from_files

Domain
detected Domain: opp.name

XIOC detected Domain: opp.name

extracted_from_files

Domain
detected Domain: group.items.map

XIOC detected Domain: group.items.map

extracted_from_files

Domain
detected Domain: colors.info

XIOC detected Domain: colors.info

extracted_from_files

Domain
detected Domain: ownerstouse.map

XIOC detected Domain: ownerstouse.map

extracted_from_files

Domain
detected Domain: traderecord.id

XIOC detected Domain: traderecord.id

extracted_from_files

Domain
detected Domain: currenttrade.id

XIOC detected Domain: currenttrade.id

extracted_from_files

URL
detected URL: https://chromewebstore.google.com/detail/rotrade-roblox-trading-au/cimeoglblfcklonpohdajckdhgjclnik)

XIOC detected URL: https://chromewebstore.google.com/detail/rotrade-roblox-trading-au/cimeoglblfcklonpohdajckdhgjclnik)

extracted_from_files

Domain
detected Domain: b.id

XIOC detected Domain: b.id

extracted_from_files

Domain
detected Domain: opportunities.map

XIOC detected Domain: opportunities.map

extracted_from_files

Domain
detected Domain: apis.roblox.com

XIOC detected Domain: apis.roblox.com

extracted_from_files

Domain
detected Domain: stored.map

XIOC detected Domain: stored.map

extracted_from_files

Domain
detected Domain: data.id

XIOC detected Domain: data.id

extracted_from_files

Domain
detected Domain: at.id

XIOC detected Domain: at.id

extracted_from_files

Domain
detected Domain: ownerstoshow.map

XIOC detected Domain: ownerstoshow.map

extracted_from_files

Domain
detected Domain: ownerpromises.map

XIOC detected Domain: ownerpromises.map

extracted_from_files

Domain
detected Domain: storedsenttradesfinal.map

XIOC detected Domain: storedsenttradesfinal.map

extracted_from_files

Domain
detected Domain: storedprivacyrestrictedfinal.map

XIOC detected Domain: storedprivacyrestrictedfinal.map

extracted_from_files

Domain
detected Domain: storedsenttradesforfilter.map

XIOC detected Domain: storedsenttradesforfilter.map

extracted_from_files

Domain
detected Domain: currenttrade.giving

XIOC detected Domain: currenttrade.giving

extracted_from_files

Domain
detected Domain: storedprivacyrestricted.map

XIOC detected Domain: storedprivacyrestricted.map

extracted_from_files

Domain
detected Domain: opp.id

XIOC detected Domain: opp.id

extracted_from_files

Domain
detected Domain: trade.name

XIOC detected Domain: trade.name

extracted_from_files

Domain
detected Domain: trade.giving.map

XIOC detected Domain: trade.giving.map

extracted_from_files

Domain
detected Domain: trade.receiving.map

XIOC detected Domain: trade.receiving.map

extracted_from_files

Domain
detected Domain: tradestoload.map

XIOC detected Domain: tradestoload.map

extracted_from_files

Domain
detected Domain: realowners.map

XIOC detected Domain: realowners.map

extracted_from_files

Domain
detected Domain: itemsarray.map

XIOC detected Domain: itemsarray.map

extracted_from_files

Domain
detected Domain: statusconfig.bg

XIOC detected Domain: statusconfig.bg

extracted_from_files

Domain
detected Domain: v.giving

XIOC detected Domain: v.giving

extracted_from_files

Domain
detected Domain: items.map

XIOC detected Domain: items.map

extracted_from_files

Domain
detected Domain: enriched.id

XIOC detected Domain: enriched.id

extracted_from_files

Domain
detected Domain: pendingtrades.map

XIOC detected Domain: pendingtrades.map

extracted_from_files

Domain
detected Domain: storedsenttrades.map

XIOC detected Domain: storedsenttrades.map

extracted_from_files

Domain
detected Domain: opportunity.id

XIOC detected Domain: opportunity.id

extracted_from_files

Domain
detected Domain: opportunity.name

XIOC detected Domain: opportunity.name

extracted_from_files

Domain
detected Domain: trades.map

XIOC detected Domain: trades.map

extracted_from_files

Domain
detected Domain: els.total

XIOC detected Domain: els.total

extracted_from_files

Domain
detected Domain: els.next

XIOC detected Domain: els.next

extracted_from_files

Domain
detected Domain: i.id

XIOC detected Domain: i.id

extracted_from_files

Domain
detected Domain: i.name

XIOC detected Domain: i.name

extracted_from_files

Domain
detected Domain: values.giving

XIOC detected Domain: values.giving

extracted_from_files

Domain
detected Domain: item.id

XIOC detected Domain: item.id

extracted_from_files

Domain
detected Domain: specifictrade.id

XIOC detected Domain: specifictrade.id

extracted_from_files

Domain
detected Domain: tradestoshow.map

XIOC detected Domain: tradestoshow.map

extracted_from_files

Domain
detected Domain: opportunity.giving.map

XIOC detected Domain: opportunity.giving.map

extracted_from_files

Domain
detected Domain: opportunity.receiving.map

XIOC detected Domain: opportunity.receiving.map

extracted_from_files

Domain
detected Domain: opportunity.giving

XIOC detected Domain: opportunity.giving

extracted_from_files

Domain
detected Domain: proofslinkcontainer.target

XIOC detected Domain: proofslinkcontainer.target

extracted_from_files

Domain
detected Domain: t.id

XIOC detected Domain: t.id

extracted_from_files

Domain
detected Domain: trade.id

XIOC detected Domain: trade.id

extracted_from_files

Domain
detected Domain: trade.giving

XIOC detected Domain: trade.giving

extracted_from_files

Domain
detected Domain: autotrades.map

XIOC detected Domain: autotrades.map

extracted_from_files

Domain
detected Domain: autotrade.id

XIOC detected Domain: autotrade.id

extracted_from_files

Domain
detected Domain: autotrade.name

XIOC detected Domain: autotrade.name

extracted_from_files

Security Analysis Summary

Security Analysis Overview

RoTrade - Roblox Trading Automated is a Chrome Web Store extension published by [email protected]. Version 1.2.10 has been analyzed by the Risky Plugins security platform, receiving a risk score of 100/100 (CRITICAL risk) based on 406 security findings.

Risk Assessment

This extension presents critical security risk. Severe issues were detected, potentially including malware indicators, exposed secrets, or dangerous behaviors. Installation is strongly discouraged until these issues are addressed.

Findings Breakdown

  • Medium: 217 finding(s)
  • Low: 189 finding(s)

What Was Analyzed

The security assessment covers multiple analysis categories:

  • Malware Detection: YARA rule matching against 2,400+ malware signatures
  • Secret Detection: Scanning for exposed API keys, tokens, and credentials
  • Static Analysis: Code-level security analysis for common vulnerability patterns
  • Network Analysis: Detection of suspicious network communications and endpoints
  • Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

RoTrade - Roblox Trading Automated is published by [email protected] on the Chrome Web Store marketplace. The extension has approximately 95 users.

Recommendation

This extension is not recommended for installation without thorough manual review. Consider alternatives with lower risk scores, or contact the developer to address the identified security concerns.

Frequently Asked Questions