Is IPTV Tools safe?

IPTV Tools can send Xtream IPTV usernames and passwords over HTTP when users enter an http:// server URL.

The add-account form stores the Xtream server URL as entered, then API requests append the username and password to /player_api.php query parameters. If a user enters an http:// server, those credentials are sent to that host over cleartext HTTP rather than HTTPS.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.