Is Vetted Launcher safe?
Vetted is medium risk. When you use Vetted Launcher to vet the current page, the extension reads the active tab URL. It sends that URL in a JSON POST request to 64.225.23.171:8000/post.…
Who publishes itBright Tapestry Data - no other listings under this identity, 13 shared hostnames
Bright Tapestry Data - no other listings under this identity, 13 shared hostnames
What this publisher told the store about itself, and the other listings that told it the same thing.
Shared hosts - 13 hostnames
Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Findings
Active tab URL sent to remote vetting server on button click
When you use Vetted Launcher to vet the current page, the extension reads the active tab URL.
It sends that URL in a JSON POST request to 64.225.23.171:8000/post.
- Severity
- Medium unwanted
- Type
- Unexpected
- CWE
- CWE-200
- Source
- Dynamic sandbox
The user triggers the vetting action.
The extension reads the active tab URL and sends it to the remote vetting server.
- Active tab URLhttps://example.com/product-review (illustrative)
Shows the web page being vetted and can reveal browsing context.
Active tab URL sent to remote vetting server after user action
When you use Vetted Launcher's vetting action, the extension reads the active tab URL and sends it to a hardcoded remote server.
The request goes to 64.225.23.171:8000/vett as a polling GET request with the page URL in the query string.
- Severity
- Medium unwanted
- Type
- Unexpected
- CWE
- CWE-200
- Source
- Dynamic sandbox
You use the extension's vetting action.
The extension reads the active tab URL and sends it to a hardcoded remote vetting server.
- Active tab URLhttps://example.com/product-review
This identifies the webpage open when you used the vetting action and can reveal browsing context.
The stored verification evidence describes polling every five seconds until a response is received or a timeout clears the interval.