Is XDM Browser Monitor safe?
XDM Browser Monitor collects cookies and request headers for intercepted downloads and sends them to the local XDM app via plaintext HTTP.
When a download is triggered, the extension captures all request and response headers — including Authorization and Cookie headers — and posts them to a local endpoint at http://127.0.0.1:9614. It also reads cookies for every linked URL on a page (not just the target download), meaning cookies from unrelated domains can be collected. All communication uses plaintext HTTP on localhost, with no transport-layer protection.
Who publishes itsubhra74 - no other listings under this identity
subhra74 - no other listings under this identity
What this publisher told the store about itself, and the other listings that told it the same thing.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Findings
Download-all-links collects cookies for every linked URL.
When you use download-all-links, the extension collects every hyperlink on the page, reads cookies for each link's domain, and posts the URL and cookie data to 127.0.0.1:9614/links, including links you never chose to download.
What actually happens
You use the download-all-links feature.
The extension collects every linked URL on the page and reads cookies for each linked URL's domain.
Captured request
Fields in the request
- Cookies for linked sitessessionid=d7f3a1b2-... (illustrative)
Cookies can identify your sessions or account state for domains linked from the page.
- Linked page URLhttps://example.com/download.zip (illustrative)
Each URL shows which external pages appeared as hyperlinks on the active page, even if you did not select them individually.
What it can do
Permissions this extension asks for, as declared in version 2.2. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Read and change your data on every site you visit
*://*/*
See the address and title of every tab you have open
tabs
Read and change cookies, including the ones that keep you signed in
cookies
Add items to the right-click menu
contextMenus
Act on the current tab, but only after you click the extension
activeTab
Watch every request your browser makes
webRequest
Watch, block and rewrite every request your browser makes
webRequestBlocking
Where it sends data
Destinations our analysis observed XDM Browser Monitor contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- 127.0.0.1:9614
XDM Browser Monitor sends data to 127.0.0.1:9614. No other extension we have analyzed sends data here.