Is BinoBot - AI Powered Trading safe?

Medium risk

BinoBot sends Binomo authtoken and device_id cookies in a remote-configured WebSocket connection URL.

When running on Binomo, BinoBot reads the user's authtoken and device_id cookies from the browser. It then appends those values to a WebSocket connection URL whose server address comes from BinoBot's remote configuration.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

GoodBotsv6.2.2Chrome Web Store
44Risk
Who publishes it

GoodBots - 2 other listings from the same operator, none carrying a finding

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
GoodBots

Same store account

2 other listings published from this account, 12k+ users between them, none of them carrying a finding.

IQ Robot - Intelligent Trading10k+LowExpertBot – Expert Robot2k+Low

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 6.2.2. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on every site you visit

    wss://*/*

  • Read and change your data on branch.io

    https://*.branch.io/*

  • Read and change your data on binomo.com

    https://binomo.com/* and 1 more

  • Read and change your data on api.binomo.com

    https://api.binomo.com/*

  • Read and change your data on promo.binomobot.com

    https://promo.binomobot.com/*

  • Read and change your data on bst.ppnet.systems

    https://bst.ppnet.systems/*

  • Read and change your data on binomobot.com

    https://binomobot.com/*

  • Read and change your data on api.binomobot.com

    https://api.binomobot.com/*

  • Read and change your data on marketing.work.ppnet.io

    https://marketing.work.ppnet.io/*

  • Read and change your data on binobot.co

    https://binobot.co/*

  • Read and change your data on assets.binobot.co

    https://assets.binobot.co/*

  • Read and change your data on api.binobot.co

    https://api.binobot.co/*

  • See the address and title of every tab you have open

    tabs

  • Read and change cookies, including the ones that keep you signed in

    cookies

  • Watch every request your browser makes

    webRequest

  • Receive push messages from its developer's servers

    gcm

  • Store data in your browser

    storage

  • Show you desktop notifications

    notifications

  • Sign you in with your Google account

    identity

  • Schedule its own background tasks

    alarms

Updated 30 September 2026fmnhijmajiagcpknfmmncahjbphjmbif