Is "Historiaszkod.pl - analiza VIN" on Firefox Add-ons Safe to Install?

Historiaszkod · firefox · v1.0.0

Sprawdzaj numery VIN jednym kliknięciem – bez kopiowania i wklejania do zewnętrznych stron Wtyczka działa automatycznie na każdej stronie, na której wykryje numer VIN. Nie trać więcej czasu na dodatkowe i zbędne czynności! Nie musisz już przeszukiwać ogłoszeń, odkrywać numerów, a następnie kopiować ich i weryfikować w internecie. Po wykryciu numeru przeprowadzona zostaje wstępna weryfikacja, a o jej wyniku zostaniesz powiadomiony w ciągu kilku chwil. Zobacz video: https://www.youtube.com/watch?v=PsomDpJ09iw

Risk Assessment

Analyzed
61.25
out of 100
MEDIUM

222 security findings detected across all analyzers

Firefox extension requesting 4 permissions

Severity Breakdown

0
Critical
19
High
203
Medium
0
Low
0
Info

Finding Categories

18
Malware Signatures
1
Obfuscation
4
Network
182
IoC Indicators

YARA Rules Matched

9 rules(18 hits)
credential env files postinstall obfuscation postinstall file manipulation postinstall network communication postinstall file download postinstall system command NoUseWeakRandom postinstall crypto operations postinstall persistence mechanism

Requested Permissions

4 permissions
*://*/*
Dangerous
activeTab
Medium
storage
Low
https://*.historiaszkod.pl/*
Low

About This Extension

<strong>Sprawdzaj numery VIN jednym kliknięciem</strong> – bez kopiowania i wklejania do zewnętrznych stron Wtyczka działa automatycznie na każdej stronie, na której wykryje numer VIN. <strong>Nie trać więcej czasu na dodatkowe i zbędne czynności!</strong> Nie musisz już przeszukiwać ogłoszeń, odkrywać numerów, a następnie kopiować ich i weryfikować w internecie. Po wykryciu numeru przeprowadzona zostaje wstępna weryfikacja, a o jej wyniku zostaniesz powiadomiony w ciągu kilku chwil. Zobacz video: <a href="https://prod.outgoing.prod.webservices.mozgcp.net/v1/5eacc89890440b1246de21c6d61c8074aee53749b3343dc942cc4f876bdfba51/https%3A//www.youtube.com/watch%3Fv=PsomDpJ09iw" rel="nofollow">https://www.youtube.com/watch?v=PsomDpJ09iw</a>

Detailed Findings

23 total

YARA Rule Matches

9 rules

Indicators of Compromise

Network indicators, suspicious strings, and potential IoCs extracted during analysis

URLs
16
IP Addresses
4
Domains
162
Strings
182

All Indicators · 182

Domain
detected Domain: k.next

XIOC detected Domain: k.next

extracted_from_files

Domain
detected Domain: addons.mozilla.org

XIOC detected Domain: addons.mozilla.org

extracted_from_files

URL
detected URL: https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700&display=swap

XIOC detected URL: https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700&display=swap

extracted_from_files

Hash
detected MD5 Hash: 2a338cbdf25aa1c5951c63b1b5e58dcc

XIOC detected MD5 Hash: 2a338cbdf25aa1c5951c63b1b5e58dcc

extracted_from_files

URL
detected URL: https://api-new.historiaszkod.pl

XIOC detected URL: https://api-new.historiaszkod.pl

extracted_from_files

URL
detected URL: http://www.w3.org/2000/svg

XIOC detected URL: http://www.w3.org/2000/svg

extracted_from_files

URL
detected URL: http://historiaszkod.pl/buy/$

XIOC detected URL: http://historiaszkod.pl/buy/$

extracted_from_files

URL
detected URL: http://www.w3.org/1999/02/22-rdf-syntax-ns#

XIOC detected URL: http://www.w3.org/1999/02/22-rdf-syntax-ns#

extracted_from_files

URL
detected URL: http://ns.adobe.com/tiff/1.0/

XIOC detected URL: http://ns.adobe.com/tiff/1.0/

extracted_from_files

URL
detected URL: https://*.historiaszkod.pl/*

XIOC detected URL: https://*.historiaszkod.pl/*

extracted_from_files

URL
detected URL: http://www.w3.org/XML/1998/namespace

XIOC detected URL: http://www.w3.org/XML/1998/namespace

extracted_from_files

URL
detected URL: http://www.w3.org/1999/xlink

XIOC detected URL: http://www.w3.org/1999/xlink

extracted_from_files

URL
detected URL: http://www.w3.org/1998/Math/MathML

XIOC detected URL: http://www.w3.org/1998/Math/MathML

extracted_from_files

URL
detected URL: http://www.w3.org/1999/xhtml

XIOC detected URL: http://www.w3.org/1999/xhtml

extracted_from_files

URL
detected URL: https://html.spec.whatwg.org/multipage/custom-elements.html#valid-custom-element-name

XIOC detected URL: https://html.spec.whatwg.org/multipage/custom-elements.html#valid-custom-element-name

extracted_from_files

URL
detected URL: https://github.com/tc39/ecma262/issues/1194

XIOC detected URL: https://github.com/tc39/ecma262/issues/1194

extracted_from_files

URL
detected URL: https://reactjs.org/docs/error-decoder.html?invariant=

XIOC detected URL: https://reactjs.org/docs/error-decoder.html?invariant=

extracted_from_files

Domain
detected Domain: browser.runtime.id

XIOC detected Domain: browser.runtime.id

extracted_from_files

Domain
detected Domain: event.data

XIOC detected Domain: event.data

extracted_from_files

Domain
detected Domain: ns.adobe.com

XIOC detected Domain: ns.adobe.com

extracted_from_files

URL
detected URL: http://addons.mozilla.org/ca/crl.pem0N

XIOC detected URL: http://addons.mozilla.org/ca/crl.pem0N

extracted_from_files

URL
detected URL: https://fonts.googleapis.com/css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900&display=swap

XIOC detected URL: https://fonts.googleapis.com/css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900&display=swap

extracted_from_files

Domain
detected Domain: c.compare

XIOC detected Domain: c.compare

extracted_from_files

Domain
detected Domain: a.id

XIOC detected Domain: a.id

extracted_from_files

Domain
detected Domain: d.is

XIOC detected Domain: d.is

extracted_from_files

Domain
detected Domain: d.next

XIOC detected Domain: d.next

extracted_from_files

Domain
detected Domain: f.name

XIOC detected Domain: f.name

extracted_from_files

Domain
detected Domain: q.memoizedprops.style

XIOC detected Domain: q.memoizedprops.style

extracted_from_files

Domain
detected Domain: h.call

XIOC detected Domain: h.call

extracted_from_files

Domain
detected Domain: yg.next

XIOC detected Domain: yg.next

extracted_from_files

Domain
detected Domain: c.next

XIOC detected Domain: c.next

extracted_from_files

Domain
detected Domain: b.next

XIOC detected Domain: b.next

extracted_from_files

Domain
detected Domain: f.next

XIOC detected Domain: f.next

extracted_from_files

Domain
detected Domain: i.call

XIOC detected Domain: i.call

extracted_from_files

Domain
detected Domain: g.next

XIOC detected Domain: g.next

extracted_from_files

Domain
detected Domain: n.call

XIOC detected Domain: n.call

extracted_from_files

Domain
detected Domain: a.target

XIOC detected Domain: a.target

extracted_from_files

Domain
detected Domain: b.data

XIOC detected Domain: b.data

extracted_from_files

Domain
detected Domain: a.top

XIOC detected Domain: a.top

extracted_from_files

Domain
detected Domain: b.target

XIOC detected Domain: b.target

extracted_from_files

Domain
detected Domain: h.target

XIOC detected Domain: h.target

extracted_from_files

Domain
detected Domain: ba.data

XIOC detected Domain: ba.data

extracted_from_files

Domain
detected Domain: h.next

XIOC detected Domain: h.next

extracted_from_files

Domain
detected Domain: a.call

XIOC detected Domain: a.call

extracted_from_files

Domain
detected Domain: a.name

XIOC detected Domain: a.name

extracted_from_files

Domain
detected Domain: nb.name

XIOC detected Domain: nb.name

extracted_from_files

Domain
detected Domain: b.name

XIOC detected Domain: b.name

extracted_from_files

Domain
detected Domain: a.style

XIOC detected Domain: a.style

extracted_from_files

Domain
detected Domain: b.style

XIOC detected Domain: b.style

extracted_from_files

Domain
detected Domain: b.is

XIOC detected Domain: b.is

extracted_from_files

Domain
detected Domain: f.call

XIOC detected Domain: f.call

extracted_from_files

Domain
detected Domain: b.call

XIOC detected Domain: b.call

extracted_from_files

Domain
detected Domain: m.call

XIOC detected Domain: m.call

extracted_from_files

Domain
detected Domain: a.id-b.id

XIOC detected Domain: a.id-b.id

extracted_from_files

Domain
detected Domain: l.now

XIOC detected Domain: l.now

extracted_from_files

Domain
detected Domain: p.now

XIOC detected Domain: p.now

extracted_from_files

Domain
detected Domain: ja.call

XIOC detected Domain: ja.call

extracted_from_files

Domain
detected Domain: this.locationwatcher.run

XIOC detected Domain: this.locationwatcher.run

extracted_from_files

Domain
detected Domain: c.data

XIOC detected Domain: c.data

extracted_from_files

Domain
detected Domain: github.com

XIOC detected Domain: github.com

extracted_from_files

Domain
detected Domain: generator.next

XIOC detected Domain: generator.next

extracted_from_files

Domain
detected Domain: positionedelement.style.top

XIOC detected Domain: positionedelement.style.top

extracted_from_files

Domain
detected Domain: options.name

XIOC detected Domain: options.name

extracted_from_files

Domain
detected Domain: j.call

XIOC detected Domain: j.call

extracted_from_files

Domain
detected Domain: auto-info.gratis

XIOC detected Domain: auto-info.gratis

extracted_from_files

Domain
detected Domain: sprawdz-vin-pojazdu.pl

XIOC detected Domain: sprawdz-vin-pojazdu.pl

extracted_from_files

Domain
detected Domain: autoskaner.eu

XIOC detected Domain: autoskaner.eu

extracted_from_files

Domain
detected Domain: carinfos.net

XIOC detected Domain: carinfos.net

extracted_from_files

Domain
detected Domain: c.id

XIOC detected Domain: c.id

extracted_from_files

Domain
detected Domain: window.top

XIOC detected Domain: window.top

extracted_from_files

Domain
detected Domain: ht.runtime.id

XIOC detected Domain: ht.runtime.id

extracted_from_files

Domain
detected Domain: vin-info.pl

XIOC detected Domain: vin-info.pl

extracted_from_files

Domain
detected Domain: vinstory.pl

XIOC detected Domain: vinstory.pl

extracted_from_files

Domain
detected Domain: carfax.eu

XIOC detected Domain: carfax.eu

extracted_from_files

Domain
detected Domain: easyvin.pl

XIOC detected Domain: easyvin.pl

extracted_from_files

Domain
detected Domain: automo.pl

XIOC detected Domain: automo.pl

extracted_from_files

Domain
detected Domain: carq.pl

XIOC detected Domain: carq.pl

extracted_from_files

Domain
detected Domain: epicvin.com

XIOC detected Domain: epicvin.com

extracted_from_files

Domain
detected Domain: autocentrum.pl

XIOC detected Domain: autocentrum.pl

extracted_from_files

Domain
detected Domain: bidcar.pl

XIOC detected Domain: bidcar.pl

extracted_from_files

Domain
detected Domain: carvertical.com

XIOC detected Domain: carvertical.com

extracted_from_files

Domain
detected Domain: autodna.pl

XIOC detected Domain: autodna.pl

extracted_from_files

Domain
detected Domain: autobaza.pl

XIOC detected Domain: autobaza.pl

extracted_from_files

IP
detected IP: ::bac

XIOC detected IP: ::bac

extracted_from_files

Domain
detected Domain: sprawdzvin.pl

XIOC detected Domain: sprawdzvin.pl

extracted_from_files

Domain
detected Domain: gratka.pl

XIOC detected Domain: gratka.pl

extracted_from_files

Domain
detected Domain: allegrolokalnie.pl

XIOC detected Domain: allegrolokalnie.pl

extracted_from_files

Domain
detected Domain: samochody.pl

XIOC detected Domain: samochody.pl

extracted_from_files

Domain
detected Domain: poleasingowe.pl

XIOC detected Domain: poleasingowe.pl

extracted_from_files

Domain
detected Domain: autogielda.pl

XIOC detected Domain: autogielda.pl

extracted_from_files

Domain
detected Domain: lento.pl

XIOC detected Domain: lento.pl

extracted_from_files

Domain
detected Domain: getauto.pl

XIOC detected Domain: getauto.pl

extracted_from_files

Domain
detected Domain: this.observer

XIOC detected Domain: this.observer

extracted_from_files

Domain
detected Domain: api-new.historiaszkod.pl

XIOC detected Domain: api-new.historiaszkod.pl

extracted_from_files

Domain
detected Domain: otomoto.pl

XIOC detected Domain: otomoto.pl

extracted_from_files

Domain
detected Domain: allegro.pl

XIOC detected Domain: allegro.pl

extracted_from_files

Domain
detected Domain: olx.pl

XIOC detected Domain: olx.pl

extracted_from_files

Domain
detected Domain: sprzedajemy.pl

XIOC detected Domain: sprzedajemy.pl

extracted_from_files

Domain
detected Domain: autoplac.pl

XIOC detected Domain: autoplac.pl

extracted_from_files

Domain
detected Domain: r.is

XIOC detected Domain: r.is

extracted_from_files

Domain
detected Domain: r.next

XIOC detected Domain: r.next

extracted_from_files

Domain
detected Domain: i.name

XIOC detected Domain: i.name

extracted_from_files

Domain
detected Domain: l.style

XIOC detected Domain: l.style

extracted_from_files

Domain
detected Domain: k.memoizedprops.style

XIOC detected Domain: k.memoizedprops.style

extracted_from_files

Domain
detected Domain: s.call

XIOC detected Domain: s.call

extracted_from_files

Domain
detected Domain: n.name

XIOC detected Domain: n.name

extracted_from_files

Domain
detected Domain: v.call

XIOC detected Domain: v.call

extracted_from_files

Domain
detected Domain: n.data

XIOC detected Domain: n.data

extracted_from_files

Domain
detected Domain: se.next

XIOC detected Domain: se.next

extracted_from_files

Domain
detected Domain: ce.next

XIOC detected Domain: ce.next

extracted_from_files

Domain
detected Domain: v.next

XIOC detected Domain: v.next

extracted_from_files

Domain
detected Domain: n.compare

XIOC detected Domain: n.compare

extracted_from_files

Domain
detected Domain: e.id

XIOC detected Domain: e.id

extracted_from_files

Domain
detected Domain: l.next

XIOC detected Domain: l.next

extracted_from_files

Domain
detected Domain: t.next

XIOC detected Domain: t.next

extracted_from_files

Domain
detected Domain: i.next

XIOC detected Domain: i.next

extracted_from_files

Domain
detected Domain: e.next

XIOC detected Domain: e.next

extracted_from_files

Domain
detected Domain: a.next

XIOC detected Domain: a.next

extracted_from_files

Domain
detected Domain: o.next

XIOC detected Domain: o.next

extracted_from_files

Domain
detected Domain: s.next

XIOC detected Domain: s.next

extracted_from_files

Domain
detected Domain: d.target

XIOC detected Domain: d.target

extracted_from_files

Domain
detected Domain: z.data

XIOC detected Domain: z.data

extracted_from_files

Domain
detected Domain: a.data

XIOC detected Domain: a.data

extracted_from_files

Domain
detected Domain: l.data

XIOC detected Domain: l.data

extracted_from_files

Domain
detected Domain: m.next

XIOC detected Domain: m.next

extracted_from_files

Domain
detected Domain: fn.next

XIOC detected Domain: fn.next

extracted_from_files

Domain
detected Domain: n.next

XIOC detected Domain: n.next

extracted_from_files

Domain
detected Domain: date.now

XIOC detected Domain: date.now

extracted_from_files

Domain
detected Domain: e.data

XIOC detected Domain: e.data

extracted_from_files

Domain
detected Domain: t.data

XIOC detected Domain: t.data

extracted_from_files

Domain
detected Domain: object.is

XIOC detected Domain: object.is

extracted_from_files

Domain
detected Domain: e.top

XIOC detected Domain: e.top

extracted_from_files

Domain
detected Domain: t.target

XIOC detected Domain: t.target

extracted_from_files

Domain
detected Domain: s.target

XIOC detected Domain: s.target

extracted_from_files

Domain
detected Domain: e.style

XIOC detected Domain: e.style

extracted_from_files

Domain
detected Domain: t.style

XIOC detected Domain: t.style

extracted_from_files

Domain
detected Domain: t.is

XIOC detected Domain: t.is

extracted_from_files

Domain
detected Domain: e.target

XIOC detected Domain: e.target

extracted_from_files

Domain
detected Domain: array.prototype.slice.call

XIOC detected Domain: array.prototype.slice.call

extracted_from_files

Domain
detected Domain: this.target

XIOC detected Domain: this.target

extracted_from_files

Domain
detected Domain: e.now

XIOC detected Domain: e.now

extracted_from_files

Domain
detected Domain: f.now

XIOC detected Domain: f.now

extracted_from_files

Domain
detected Domain: x.call

XIOC detected Domain: x.call

extracted_from_files

Domain
detected Domain: e.call

XIOC detected Domain: e.call

extracted_from_files

Domain
detected Domain: e.name

XIOC detected Domain: e.name

extracted_from_files

Domain
detected Domain: t.name

XIOC detected Domain: t.name

extracted_from_files

Domain
detected Domain: l.call

XIOC detected Domain: l.call

extracted_from_files

Domain
detected Domain: ze.call

XIOC detected Domain: ze.call

extracted_from_files

Domain
detected Domain: ae.call

XIOC detected Domain: ae.call

extracted_from_files

Domain
detected Domain: p.next

XIOC detected Domain: p.next

extracted_from_files

Domain
detected Domain: w.call

XIOC detected Domain: w.call

extracted_from_files

Domain
detected Domain: y.call

XIOC detected Domain: y.call

extracted_from_files

Domain
detected Domain: m.id-j.id

XIOC detected Domain: m.id-j.id

extracted_from_files

Domain
detected Domain: performance.now

XIOC detected Domain: performance.now

extracted_from_files

Domain
detected Domain: object.prototype.hasownproperty.call

XIOC detected Domain: object.prototype.hasownproperty.call

extracted_from_files

Domain
detected Domain: u.next

XIOC detected Domain: u.next

extracted_from_files

Domain
detected Domain: object.prototype.tostring.call

XIOC detected Domain: object.prototype.tostring.call

extracted_from_files

Domain
detected Domain: c.style.top

XIOC detected Domain: c.style.top

extracted_from_files

Domain
detected Domain: t.call

XIOC detected Domain: t.call

extracted_from_files

Domain
detected Domain: c.name

XIOC detected Domain: c.name

extracted_from_files

Domain
detected Domain: u.call

XIOC detected Domain: u.call

extracted_from_files

Domain
detected Domain: fonts.googleapis.com

XIOC detected Domain: fonts.googleapis.com

extracted_from_files

Domain
detected Domain: vin-detector-container.mini

XIOC detected Domain: vin-detector-container.mini

extracted_from_files

Domain
detected Domain: html.spec.whatwg.org

XIOC detected Domain: html.spec.whatwg.org

extracted_from_files

Domain
detected Domain: reactjs.org

XIOC detected Domain: reactjs.org

extracted_from_files

Domain
detected Domain: www.w3.org

XIOC detected Domain: www.w3.org

extracted_from_files

Domain
detected Domain: historiaszkod.pl

XIOC detected Domain: historiaszkod.pl

extracted_from_files

Domain
detected Domain: du.id

XIOC detected Domain: du.id

extracted_from_files

Domain
detected Domain: content-signature.mozilla.org

XIOC detected Domain: content-signature.mozilla.org

extracted_from_files

Domain
detected Domain: tb26cf1544485d0a53f161e423e1b00f8.2a338cbdf25aa1c5951c63b1b5e58dcc.addons.mozilla.org

XIOC detected Domain: tb26cf1544485d0a53f161e423e1b00f8.2a338cbdf25aa1c5951c63b1b5e58dcc.addons.mozilla.org

extracted_from_files

Domain
detected Domain: f.id

XIOC detected Domain: f.id

extracted_from_files

Domain
detected Domain: globalthis.chrome

XIOC detected Domain: globalthis.chrome

extracted_from_files

Domain
detected Domain: l.storage

XIOC detected Domain: l.storage

extracted_from_files

Domain
detected Domain: chrome.storage

XIOC detected Domain: chrome.storage

extracted_from_files

Domain
detected Domain: browser.storage

XIOC detected Domain: browser.storage

extracted_from_files

IP
detected IP: ::

XIOC detected IP: ::

extracted_from_files

IP
detected IP: ea::

XIOC detected IP: ea::

extracted_from_files

Domain
detected Domain: content.js.map

XIOC detected Domain: content.js.map

extracted_from_files

Domain
detected Domain: popup-btfqfx5b.js.map

XIOC detected Domain: popup-btfqfx5b.js.map

extracted_from_files

Domain
detected Domain: signingca1.addons.mozilla.org

XIOC detected Domain: signingca1.addons.mozilla.org

extracted_from_files

Domain
detected Domain: mozilla.com

XIOC detected Domain: mozilla.com

extracted_from_files

Domain
detected Domain: moj.gov.pl

XIOC detected Domain: moj.gov.pl

extracted_from_files

Security Analysis Summary

Security Analysis Overview

Historiaszkod.pl - analiza VIN is a Firefox Add-ons extension published by Historiaszkod. Version 1.0.0 has been analyzed by the Risky Plugins security platform, receiving a risk score of 61.25/100 (MEDIUM risk) based on 222 security findings.

Risk Assessment

This extension presents high security risk. Significant concerns were identified during analysis. It is not recommended for use in sensitive or production environments without thorough review.

Findings Breakdown

  • High: 19 finding(s)
  • Medium: 203 finding(s)

What Was Analyzed

The security assessment covers multiple analysis categories:

  • Malware Detection: YARA rule matching against 2,400+ malware signatures
  • Secret Detection: Scanning for exposed API keys, tokens, and credentials
  • Static Analysis: Code-level security analysis for common vulnerability patterns
  • Network Analysis: Detection of suspicious network communications and endpoints
  • Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

Historiaszkod.pl - analiza VIN is published by Historiaszkod on the Firefox Add-ons marketplace. The extension has approximately 106 users.

Recommendation

This extension is not recommended for installation without thorough manual review. Consider alternatives with lower risk scores, or contact the developer to address the identified security concerns.

Frequently Asked Questions