Is OpenWardrobe safe?
OpenWardrobe sends the current page URL to affiliate redirect services when you click its toolbar or hover-save controls.
When triggered, OpenWardrobe encodes the current page URL and sends it to redirect.viglink.com with an affiliate key. For mapped merchant domains, it also loads a www.tkqlhce.com affiliate pixel containing the encoded URL, while the service worker opens the VigLink URL in an unfocused 1x1 popup and closes it after load.
Who publishes itOpenWardrobe Inc. - no other listings under this identity
OpenWardrobe Inc. - no other listings under this identity
What this publisher told the store about itself, and the other listings that told it the same thing.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Findings
Action click sends the current page URL through affiliate redirects.
Clicking the OpenWardrobe extension action reads the active page's URL and forwards it to affiliate redirect services, redirect.viglink.com, and for mapped merchants, www.tkqlhce.com, carrying your current browsing URL.
- Severity
- Medium unwanted
- Type
- Unexpected
- CWE
- CWE-359
- Source
- Dynamic sandbox
You click the extension action.
The extension reads the active tab URL and forwards it through affiliate redirect URLs.
- Current page URLhttps://example.com/product-page (illustrative)
Shows the page you were viewing when you clicked the extension action.
Dynamic analysis confirmed the extension reads the active page URL and sends it to VigLink or tkqlhce affiliate redirect endpoints after the extension action is clicked.
Where it sends data
Destinations our analysis observed OpenWardrobe contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- redirect.viglink.com
OpenWardrobe sends data to redirect.viglink.com. No other extension we have analysed sends data here.
- www.tkqlhce.com
OpenWardrobe sends data to www.tkqlhce.com. No other extension we have analysed sends data here.