Is CMS Detect - What CMS is that site using? safe?

CMS Detect sends the active tab's URL to cmsdetect.com over plaintext HTTP each time the popup is opened.

When a user opens the extension popup, it automatically retrieves the current tab's URL and transmits it to cmsdetect.com via an unencrypted HTTP GET request. The remote server returns markup identifying the CMS in use on that page, which is rendered inside the popup. Because the request uses HTTP rather than HTTPS, the URL being looked up is visible to any network observer between the user and cmsdetect.com.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.