Is "Better Trading for Firefox" on Firefox Add-ons Safe to Install?

appaK · firefox · v1.1.0

Better Trading for Firefox adds a persistent side panel to the Path of Exile trade site ( pathofexile.com/trade ). Bookmarks — save trade searches into named folders with icons, archive completed ones, reorder by dragging, and export or import using the same backup format as the original Better Trading add-on. History — automatically tracks searches you visit so you can jump back to them later. Live enhancers — applied directly to trade results: - Highlights active stat filters - Warns when items have fewer sockets than they can roll - Shows chaos-equivalent prices from poe.ninja - Regroups similar listings for easier comparing Pinned items — pin individual results to keep them visible while browsing. Everything is stored locally. No account needed. No data sent anywhere except optional poe.ninja requests for currency pricing.

Risk Assessment

Analyzed
84.96
out of 100
HIGH

112 security findings detected across all analyzers

Firefox extension requesting 6 permissions

Severity Breakdown

0
Critical
23
High
89
Medium
0
Low
0
Info

Finding Categories

22
Malware Signatures
1
Obfuscation
3
Network
84
IoC Indicators

YARA Rules Matched

8 rules(22 hits)
postinstall system command postinstall obfuscation postinstall file manipulation postinstall network communication postinstall file download postinstall persistence mechanism NoUseWeakRandom postinstall crypto operations

Requested Permissions

6 permissions
storage
Low
*://pathofexile.com/trade*
Low
*://pathofexile.com/trade2*
Low
*://www.pathofexile.com/trade*
Low
*://www.pathofexile.com/trade2*
Low
https://poe.ninja/*
Low

About This Extension

<strong>Better Trading for Firefox</strong> adds a persistent side panel to the Path of Exile trade site (<a href="https://prod.outgoing.prod.webservices.mozgcp.net/v1/f067610814a6e65e120b2060ab124d4843462ba9a06784a9619e27b2e5c625f7/http%3A//pathofexile.com/trade" rel="nofollow">pathofexile.com/trade</a>). <strong>Bookmarks</strong> — save trade searches into named folders with icons, archive completed ones, reorder by dragging, and export or import using the same backup format as the original Better Trading add-on. <strong>History</strong> — automatically tracks searches you visit so you can jump back to them later. <strong>Live enhancers</strong> — applied directly to trade results: - Highlights active stat filters - Warns when items have fewer sockets than they can roll - Shows chaos-equivalent prices from poe.ninja - Regroups similar listings for easier comparing <strong>Pinned items</strong> — pin individual results to keep them visible while browsing. <em>Everything is stored locally. No account needed. No data sent anywhere except optional poe.ninja requests for currency pricing.</em>

Detailed Findings

26 total

YARA Rule Matches

8 rules

Indicators of Compromise

Network indicators, suspicious strings, and potential IoCs extracted during analysis

URLs
9
IP Addresses
4
Domains
70
Strings
84

All Indicators · 84

Domain
detected Domain: e.style

XIOC detected Domain: e.style

extracted_from_files

Hash
detected MD5 Hash: 2f7481c8a8985b1da5624682c6592a5c

XIOC detected MD5 Hash: 2f7481c8a8985b1da5624682c6592a5c

extracted_from_files

URL
detected URL: https://developer.mozilla.org/en-US/docs/Web/API/Element/attachShadow#elements_you_can_attach_a_shadow_to

XIOC detected URL: https://developer.mozilla.org/en-US/docs/Web/API/Element/attachShadow#elements_you_can_attach_a_shadow_to

extracted_from_files

URL
detected URL: https://www.pathofexile.com

XIOC detected URL: https://www.pathofexile.com

extracted_from_files

URL
detected URL: https://web.poecdn.com/image/Art/2DItems/Currency/CurrencyRerollRare.png

XIOC detected URL: https://web.poecdn.com/image/Art/2DItems/Currency/CurrencyRerollRare.png

extracted_from_files

URL
detected URL: https://github.com/wxt-dev/wxt/issues/371

XIOC detected URL: https://github.com/wxt-dev/wxt/issues/371

extracted_from_files

URL
detected URL: https://wxt.dev/guide/go-further/testing.html

XIOC detected URL: https://wxt.dev/guide/go-further/testing.html

extracted_from_files

URL
detected URL: https://github.com/appaKappaK/better-trading-for-firefox

XIOC detected URL: https://github.com/appaKappaK/better-trading-for-firefox

extracted_from_files

URL
detected URL: https://poe.ninja/*

XIOC detected URL: https://poe.ninja/*

extracted_from_files

Domain
detected Domain: this.locationwatcher.run

XIOC detected Domain: this.locationwatcher.run

extracted_from_files

Domain
detected Domain: h.gq

XIOC detected Domain: h.gq

extracted_from_files

Domain
detected Domain: v.goo

XIOC detected Domain: v.goo

extracted_from_files

URL
detected URL: http://addons.mozilla.org/ca/crl.pem0N

XIOC detected URL: http://addons.mozilla.org/ca/crl.pem0N

extracted_from_files

URL
detected URL: https://poe.ninja/api

XIOC detected URL: https://poe.ninja/api

extracted_from_files

Domain
detected Domain: n.bookmarks.folders.at

XIOC detected Domain: n.bookmarks.folders.at

extracted_from_files

Domain
detected Domain: pathofexile.com

XIOC detected Domain: pathofexile.com

extracted_from_files

Domain
detected Domain: j.top

XIOC detected Domain: j.top

extracted_from_files

Domain
detected Domain: r.clienty-c.top

XIOC detected Domain: r.clienty-c.top

extracted_from_files

Domain
detected Domain: o.id

XIOC detected Domain: o.id

extracted_from_files

IP
detected IP: ::8

XIOC detected IP: ::8

extracted_from_files

Domain
detected Domain: this.id

XIOC detected Domain: this.id

extracted_from_files

Domain
detected Domain: e.watch

XIOC detected Domain: e.watch

extracted_from_files

Domain
detected Domain: o.map

XIOC detected Domain: o.map

extracted_from_files

Domain
detected Domain: u.storage

XIOC detected Domain: u.storage

extracted_from_files

Domain
detected Domain: c.map

XIOC detected Domain: c.map

extracted_from_files

Domain
detected Domain: browser.storage

XIOC detected Domain: browser.storage

extracted_from_files

Domain
detected Domain: n.id

XIOC detected Domain: n.id

extracted_from_files

Domain
detected Domain: e.dataset.id

XIOC detected Domain: e.dataset.id

extracted_from_files

Domain
detected Domain: t.name

XIOC detected Domain: t.name

extracted_from_files

Domain
detected Domain: i.map

XIOC detected Domain: i.map

extracted_from_files

Domain
detected Domain: it.map

XIOC detected Domain: it.map

extracted_from_files

Domain
detected Domain: c.id

XIOC detected Domain: c.id

extracted_from_files

Domain
detected Domain: n.map

XIOC detected Domain: n.map

extracted_from_files

Domain
detected Domain: r.next

XIOC detected Domain: r.next

extracted_from_files

Domain
detected Domain: dr.call

XIOC detected Domain: dr.call

extracted_from_files

Domain
detected Domain: wxt.dev

XIOC detected Domain: wxt.dev

extracted_from_files

Domain
detected Domain: f.call

XIOC detected Domain: f.call

extracted_from_files

Domain
detected Domain: y.is

XIOC detected Domain: y.is

extracted_from_files

Domain
detected Domain: e.data

XIOC detected Domain: e.data

extracted_from_files

Domain
detected Domain: object.prototype.tostring.call

XIOC detected Domain: object.prototype.tostring.call

extracted_from_files

Domain
detected Domain: t.style.top

XIOC detected Domain: t.style.top

extracted_from_files

Domain
detected Domain: n.next

XIOC detected Domain: n.next

extracted_from_files

Domain
detected Domain: kn.map

XIOC detected Domain: kn.map

extracted_from_files

Domain
detected Domain: e.group

XIOC detected Domain: e.group

extracted_from_files

Domain
detected Domain: t.select

XIOC detected Domain: t.select

extracted_from_files

Domain
detected Domain: r.download

XIOC detected Domain: r.download

extracted_from_files

Domain
detected Domain: r.click

XIOC detected Domain: r.click

extracted_from_files

Domain
detected Domain: developer.mozilla.org

XIOC detected Domain: developer.mozilla.org

extracted_from_files

Domain
detected Domain: web.poecdn.com

XIOC detected Domain: web.poecdn.com

extracted_from_files

Domain
detected Domain: e.bookmarks.folders.map

XIOC detected Domain: e.bookmarks.folders.map

extracted_from_files

Domain
detected Domain: e.id

XIOC detected Domain: e.id

extracted_from_files

Domain
detected Domain: www.pathofexile.com

XIOC detected Domain: www.pathofexile.com

extracted_from_files

Domain
detected Domain: e.history.entries.map

XIOC detected Domain: e.history.entries.map

extracted_from_files

Domain
detected Domain: t.id

XIOC detected Domain: t.id

extracted_from_files

Domain
detected Domain: ln.map

XIOC detected Domain: ln.map

extracted_from_files

Domain
detected Domain: b.map

XIOC detected Domain: b.map

extracted_from_files

Domain
detected Domain: o.call

XIOC detected Domain: o.call

extracted_from_files

Domain
detected Domain: e.name

XIOC detected Domain: e.name

extracted_from_files

Domain
detected Domain: k.map

XIOC detected Domain: k.map

extracted_from_files

Domain
detected Domain: r.trs.map

XIOC detected Domain: r.trs.map

extracted_from_files

Domain
detected Domain: t.map

XIOC detected Domain: t.map

extracted_from_files

Domain
detected Domain: i.id

XIOC detected Domain: i.id

extracted_from_files

Domain
detected Domain: e.trades.map

XIOC detected Domain: e.trades.map

extracted_from_files

Domain
detected Domain: e.call

XIOC detected Domain: e.call

extracted_from_files

Domain
detected Domain: e.map

XIOC detected Domain: e.map

extracted_from_files

Domain
detected Domain: s.is

XIOC detected Domain: s.is

extracted_from_files

Domain
detected Domain: n.data

XIOC detected Domain: n.data

extracted_from_files

Domain
detected Domain: t.call

XIOC detected Domain: t.call

extracted_from_files

Domain
detected Domain: a.call

XIOC detected Domain: a.call

extracted_from_files

Domain
detected Domain: t3c.mr

XIOC detected Domain: t3c.mr

extracted_from_files

Domain
detected Domain: x.ms

XIOC detected Domain: x.ms

extracted_from_files

Domain
detected Domain: poe.ninja

XIOC detected Domain: poe.ninja

extracted_from_files

Domain
detected Domain: globalthis.chrome

XIOC detected Domain: globalthis.chrome

extracted_from_files

Domain
detected Domain: date.now

XIOC detected Domain: date.now

extracted_from_files

Domain
detected Domain: t.runtime.id

XIOC detected Domain: t.runtime.id

extracted_from_files

Domain
detected Domain: github.com

XIOC detected Domain: github.com

extracted_from_files

IP
detected IP: 9::

XIOC detected IP: 9::

extracted_from_files

IP
detected IP: 0::

XIOC detected IP: 0::

extracted_from_files

IP
detected IP: 8::b

XIOC detected IP: 8::b

extracted_from_files

Domain
detected Domain: signingca1.addons.mozilla.org

XIOC detected Domain: signingca1.addons.mozilla.org

extracted_from_files

Domain
detected Domain: mozilla.com

XIOC detected Domain: mozilla.com

extracted_from_files

Domain
detected Domain: content-signature.mozilla.org

XIOC detected Domain: content-signature.mozilla.org

extracted_from_files

Domain
detected Domain: t337ff0f8c2c6412c77d83b0e7250003f.2f7481c8a8985b1da5624682c6592a5c.addons.mozilla.org

XIOC detected Domain: t337ff0f8c2c6412c77d83b0e7250003f.2f7481c8a8985b1da5624682c6592a5c.addons.mozilla.org

extracted_from_files

Domain
detected Domain: a.id

XIOC detected Domain: a.id

extracted_from_files

Security Analysis Summary

Security Analysis Overview

Better Trading for Firefox is a Firefox Add-ons extension published by appaK. Version 1.1.0 has been analyzed by the Risky Plugins security platform, receiving a risk score of 84.96/100 (HIGH risk) based on 112 security findings.

Risk Assessment

This extension presents critical security risk. Severe issues were detected, potentially including malware indicators, exposed secrets, or dangerous behaviors. Installation is strongly discouraged until these issues are addressed.

Findings Breakdown

  • High: 23 finding(s)
  • Medium: 89 finding(s)

What Was Analyzed

The security assessment covers multiple analysis categories:

  • Malware Detection: YARA rule matching against 2,400+ malware signatures
  • Secret Detection: Scanning for exposed API keys, tokens, and credentials
  • Static Analysis: Code-level security analysis for common vulnerability patterns
  • Network Analysis: Detection of suspicious network communications and endpoints
  • Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

Better Trading for Firefox is published by appaK on the Firefox Add-ons marketplace. The extension has approximately 11 users.

Recommendation

This extension is not recommended for installation without thorough manual review. Consider alternatives with lower risk scores, or contact the developer to address the identified security concerns.

Frequently Asked Questions