Is cash-catch safe?

Question

Is cash-catch safe?

Accepted Answer

cash-catch is high risk. Every page you visit triggers the Cash Catch extension to send the full URL of that page, the referring URL, and the hostname of the tab that opened the current tab to a third-party server at rukthwaealso.com. This happens automatically on every navigation across every website — not just shopping sites. The data is encoded in base64 before transmission, making it non-obvious in plain network inspection. The Cash Catch extension downloads its behavioral configuration from two remote servers — hemostgracefu.org and rukthwaealso.com — on startup and at regular intervals. This configuration controls which sites trigger the popup, affiliate cookie behavior, timing of consent events, and cart detection logic across all websites you visit. Because neither server response is signed or integrity-checked, whoever controls these servers can without notifying the user change how the extension behaves on any site.

Is Cash Catch safe?

Findings