Is Fiyat Geçmişi safe?
Fiyat Geçmişi sends Trendyol product, search, coupon, and add-to-basket details to tyol.refinementpoker.online.
On Trendyol pages, the extension posts product URLs, prices, category text, ratings, page HTML, and product-detail screenshots to its server. It also reports Trendyol search URLs and terms, coupon DOM details, and add-to-basket clicks that include seller name, product URL, visible user name, product ID, and timestamp.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Findings
Trendyol cart clicks send product and profile details to a remote host.
When you click an add-to-basket button on Trendyol, Fiyat Geçmişi collects the seller, current product URL, visible user name, product ID, and timestamp.
It forwards those details to tyol.refinementpoker.online/add_to_basket.
- Severity
- Medium unwanted
- Type
- Unexpected
- CWE
- CWE-359
- Source
- Dynamic sandbox
The user clicks a Trendyol add-to-basket or add-to-cart button.
The extension collects seller, product URL, visible user name, product ID, timestamp, and URL-parameter status, then sends the object to a remote endpoint.
- Product page URLhttps://www.trendyol.com/example-product-p-123456
Shows which Trendyol product page was open when the basket action happened.
- Product/profile page textSeller: Example Merchant; user: Example User; productId: 123456; timestamp: 2026-07-13T09:50:45Z
Includes page-derived details such as seller name, visible user name, product ID, timestamp, and related URL-parameter status.
Observed during dynamic analysis: the same-extension message path forwards the collected add-to-basket object unchanged to the remote endpoint.
Where it sends data
Destinations our analysis observed Fiyat Geçmişi contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- tyol.refinementpoker.online
Fiyat Geçmişi sends data to tyol.refinementpoker.online. No other extension we have analysed sends data here.