Is Kaito Pulse safe?
Kaito Pulse records per-tweet attention and a device fingerprint on x.com and uploads them to hub.kaito.ai, once the user opts in.
After the user grants behavior consent, the extension records how long they dwell on and click tweets on x.com, along with a device fingerprint (canvas, WebGL, audio, screen, timezone), and sends batches to hub.kaito.ai. Separately, a proof-of-account flow on exchange sites such as MEXC, Binance and OKX hooks fetch/XHR when armed and replays the user's authenticated requests to the same exchange, passing them to the bundled Primus zkTLS attestation SDK.
Who publishes itKaito Pte. Ltd. - no other listings under this identity, 4 shared hostnames
Kaito Pte. Ltd. - no other listings under this identity, 4 shared hostnames
What this publisher told the store about itself, and the other listings that told it the same thing.
Shared hosts - 4 hostnames
Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Where it sends data
Destinations our analysis observed Kaito Pulse contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- hub.kaito.ai
Kaito Pulse sends data to hub.kaito.ai. No other extension we have analyzed sends data here.
- primuslabs.xyz
Kaito Pulse sends data to primuslabs.xyz. No other extension we have analyzed sends data here.