Is TikTok极光-AI自动提报商品机会&采集商品-黑桃A科技 safe?
TikTok极光 sends seller account tokens and product data to a hardcoded backend IP over plain HTTP, not HTTPS.
This extension helps TikTok Shop and Amazon sellers manage product listings, run image searches, and get AI chat suggestions. Its background script sends the user's vendor-backend session token and seller/shop IDs to a hardcoded IP address using unencrypted HTTP, and falls back to a third-party proxy server when a direct request fails, forwarding the original request URL and body. Because the traffic is unencrypted, anyone positioned on the network path (public Wi-Fi, a compromised router) could read or replay the session token.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
Who publishes it两情迢迢 - no other listings under this identity, 1 shared hostname
两情迢迢 - no other listings under this identity, 1 shared hostname
What this publisher told the store about itself, and the other listings that told it the same thing.
Shared hosts - 1 hostname
Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Where it sends data
Destinations our analysis observed TikTok极光-AI自动提报商品机会&采集商品-黑桃A科技 contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- 43.251.102.174
TikTok极光-AI自动提报商品机会&采集商品-黑桃A科技 sends data to 43.251.102.174. No other extension we have analysed sends data here.
- proxy-delta-orcin.vercel.app
TikTok极光-AI自动提报商品机会&采集商品-黑桃A科技 sends data to proxy-delta-orcin.vercel.app. No other extension we have analysed sends data here.