Is "Cast to Sonos" on Chrome Web Store Safe to Install?

[email protected] ยท chrome ยท v1.19

Cast to Sonos: Stream Directly from Your Browser to Sonos โ€“ Effortless & High-Quality ๐ŸŽ‰ NEW: Automatic Video Sync for all users (+Stereo for Premium) ๐ŸŽ‰ The extension now automatically measures your Sonos delay and syncs video playback to eliminate audio lag. Premium users also get stereo audio streaming up to 320 kbps. Experience seamless audio streaming to your Sonos speakers right from your Chrome browser. With Cast to Sonos, elevate your streaming experience by casting audio from any website, bringing rich, high-quality sound to your Sonos system with just a few clicks. Whether you're watching videos, listening to music, or streaming from popular sites, Cast to Sonos offers the versatility and performance Sonos users expect. For setup assistance, check our [installation instructions](https://medium.com/@casttosonos/how-to-cast-to-sonos-from-chrome-805fbc36a60d) or watch our [video tutorial](https://www.youtube.com/watch?v=IBx0BjxkfEI&t=18s). โ€”โ€”โ€”โ€”โ€”โ€”โ€”โ€” SEAMLESS SONOS INTEGRATION With Cast to Sonos, you get a smooth, integrated experience similar to using your Sonos app. Features include: โžค Household & Device Selection: Choose the Sonos household or device to stream to, allowing for easy room-to-room control. โžค Automatic Video Sync: Revolutionary frame sync technology automatically measures your Sonos delay and syncs video playback to match, eliminating audio-video lag when watching videos. โžค Automatic Color Matching: The extension adjusts its background color to match the website you're on, creating a cohesive look. โžค Dark Mode Support: Enjoy a sleek, visually comfortable experience in dark mode. โžค Dynamic Player Interface: The extension displays the current audio thumbnail and a Cast to Sonos logo in the Sonos app, creating a seamless experience. โžค Full Player Control: Play, pause, and adjust volume directly from the Sonos app or Cast to Sonos. โ€”โ€”โ€”โ€”โ€”โ€”โ€”โ€” PREMIUM AUDIO QUALITY & PERFORMANCE BOOST Upgrade to Cast to Sonos Premium for enhanced audio fidelity and stereo streaming, ensuring every note is delivered with the clarity your Sonos setup deserves. Premium users enjoy high-quality stereo audio streaming (up to 320 kbps) while free users get reliable mono audio (128 kbps). Additionally, Cast to Sonos optimizes performance by running all audio capture on a separate worker thread, minimizing any impact on browser performance. โ€”โ€”โ€”โ€”โ€”โ€”โ€”โ€” HOW TO GET STARTED The get started, please take a look at the following guide on how to install the extensions: [Installation Guide](https://medium.com/@casttosonos/how-to-cast-to-sonos-from-chrome-805fbc36a60d) Also don't forget to check out our tutorial which helps to walk you through the user interface: [Video Tutorial](https://www.youtube.com/watch?v=IBx0BjxkfEI&t=18s) For troubleshooting, ensure no other app (like Spotify or YouTube) is actively using your Sonos device. Pausing these other apps can help establish a stable connection. If that does not help, please re-install the extension and finally contact our support using either the "Support" page in the Chrome Web Store or by sending us an email at: [email protected] โ€”โ€”โ€”โ€”โ€”โ€”โ€”โ€” YOUR PRIVACY, OUR PRIORITY: A Transparent Look at How Cast to Sonos Handles Your Data We take privacy seriously and are committed to transparency about how our extension works and what data it accesses: โžค Secure Sign-In: Your login is done through the Sonos website, so we never see or store your password. You can confirm this by inspecting the login window and checking the URL to ensure it's Sonos. โžค Limited Data Storage: We only store a temporary access key to communicate with your Sonos system, with no other personal data stored. Analytics are minimal and limited strictly to operational needs. โžค Easy Data Control: Instantly revoke access through your Sonos account or directly within the extension. Right-click on the Cast to Sonos icon, select "Options," and choose "Clear data" to remove settings and access keys. For those seeking extra privacy and performance, enable the "Disable front-end scripts" option. This feature prevents the extension from adjusting background colors to your current open tab, but reduces page load times. However, this script is highly optimized and runs only after a page has fully loaded so you will probably not see a difference. โ€”โ€”โ€”โ€”โ€”โ€”โ€”โ€” PLANS & SUBSCRIPTIONS โžค Free Plan: Access basic casting features and enjoy standard audio quality. โžค Premium Trial: Explore premium audio fidelity with a free trial of our enhanced sound quality. โžค Premium Plan: Upgrade to premium for high-fidelity audio and the best streaming quality your Sonos speakers can offer. For more details and subscription options, explore the plans in the extension settings. โ€”โ€”โ€”โ€”โ€”โ€”โ€”โ€” COMPREHENSIVE SUPPORT & REGULAR UPDATES Our team is dedicated to providing a smooth experience with reliable support. Contact us anytime through the Chrome Web Store Support page, and we'll help resolve any issues. We release regular updates to address user feedback, ensure compatibility, and improve performance, so your Cast to Sonos experience keeps getting better. โ€”โ€”โ€”โ€”โ€”โ€”โ€”โ€” FAQ: Common Questions about Cast to Sonos โžค Will this replace my Sonos app? No, Cast to Sonos works alongside your Sonos app, allowing you to control playback, volume, and device selection from either platform. โžค Why is there a delay? While casting from your browser can introduce a delay due to network streaming, Cast to Sonos now automatically solves this with frame sync technology that measures your Sonos delay and syncs video playback to match. You can customize this behavior in the extension settings (right-click the extension icon and select "Options"). โ€”โ€”โ€”โ€”โ€”โ€”โ€”โ€” Transform your Sonos speakers into the ultimate browser-powered streaming system with Cast to Sonos โ€“ the essential tool for every Sonos user who wants total control and flexibility. [Installation Guide](https://medium.com/@casttosonos/how-to-cast-to-sonos-from-chrome-805fbc36a60d) | [Video Tutorial](https://www.youtube.com/watch?v=IBx0BjxkfEI&t=18s) Changelog: v1.1: * Added free mode * Added more languages * Improved error handling and error explanations * Changed font v1.2: * Improved messages and handling of rate limit errors * Fixed a bug that caused users to have to re-authenticate with Sonos * Changed icons v1.3: * Fixed an issue with translations that made it impossible for non-English users to install the extension v1.4: * Changed Dutch translations * Add dynamic background based on website contents * Removed debug information that was cluttering the debug logs * Better error handling for users that attempt to stream pages starting with chrome:// * Close the previous stream when the user starts a new stream on a new tab * Changed the icon displayed inside the Sonos app * Added an error screen when the user can not connect to the server * Added a loading screen when the app is connecting to the server * Add a dynamic icon inside the Sonos app v1.5: * Corrected incorrect title v1.6: * Remember living room and device after popup is closed * Improved speed at which the background color and thumbnail image is retrieved from the foreground webpage to +-100ms v1.7: * Improved logging for better debugging v1.8: * Added extension version number for better debugging * Retry mechanism for when fetching the user fails * Better error display, no more alert windows * Fixed an issue where the tab media stream would not stop after disabling the connection before pressing play * Prevent unnecessary network requests from the background script * Do not display the ERROR_RESOURCE_GONE error, re-fetch the households instead * Introduce a timeout for network requests of 5 seconds * Rename the native 'TypeError: Failed to fetch' error message to 'Network error', because it's confusing * Rename the native 'AbortError, DOMException, user cancelled the request' to 'Network error', because it's confusing (and not correct) * Better error handling when there are connectivity issues * Translated a few error messages which were still English-only * Handle all kind of connectivity issues and recover from network failures v1.9: * Added the ability to disable front-end scripts * Removed permissions for access to all urls, instead use the "activeTab" permission * Added a link to manage premium subscriptions to the options page * Fixed an issue with refreshing expired auth tokens and handling of invalid auth tokens v1.10 * Added rewardful for affiliate marketing * Fixed an issue with language translations which caused app installations to fail v1.11 * Changed Chrome web store category to "Entertainment" v1.12 * Streaming service upgraded and maintenance work done v1.13 * Fixed a storage limit issue which rendered the extension unusable for users with multiple households and/or devices * Improved error logging * Changed the extension description * Removed unnecessary foreground logging which caused clutter in the console v1.14 * Upgraded to carbon-neutral hosting with dedicated servers in Europe and the US for faster, more stable connections * Improved connection timeout handling - reduced failed connection attempts and error messages * Enhanced server selection - the extension now automatically chooses the best server based on your location for optimal performance * Added future support for streaming local audio files directly from your computer to Sonos speakers * Better error messages that are more helpful when streaming fails due to website restrictions * Upgraded to Node.js 24 for improved performance and security * Added automatic server health monitoring and failover capabilities * Improved extension startup time and reduced memory usage * Enhanced compatibility with more websites and audio sources * Added custom streaming endpoint option in settings for advanced users * Better handling of network interruptions and automatic reconnection * Improved audio quality and reduced streaming interruptions * Enhanced deployment automation for faster updates and bug fixes v1.15 * Added automatic frame sync to eliminate audio-video delay when watching videos * Added stereo audio streaming support for premium users (up to 320 kbps) * Added frame sync settings in options - disable, static delay, or automatic measurement * Fixed websocket cleanup issues on stream stop * Improved resource cleanup and memory management * Fixed encoder cleanup and disconnect handling * Better error handling for websocket connections v1.16 * Added support for multiple plans * Better options for user-feedback v1.17 * Fixed compatibility issue with YouTube and other websites that have strict Content Security Policies (CSP) * Extension now works reliably on YouTube and similar sites with enhanced security settings v1.18 * Migrated to a multi-plan ExtensionPay setup. v1.19 * Fixed an issue that prevented users from paying for better streaming tiers.

Risk Assessment

Analyzed
100
out of 100
CRITICAL

322 security findings detected across all analyzers

Chrome extension requesting 7 permissions

Severity Breakdown

0
Critical
0
High
184
Medium
138
Low
0
Info

Finding Categories

3
Network
176
IoC Indicators

YARA Rules Matched

8 rules(138 hits)
postinstall file manipulation postinstall file download postinstall system command NoUseWeakRandom postinstall network communication postinstall obfuscation postinstall persistence mechanism postinstall crypto operations

Requested Permissions

7 permissions
tabs
Medium
activeTab
Medium
tabCapture
Low
storage
Low
scripting
Low
https://api.casttosonos.com/*
Low
https://casttosonos.com/*
Low

About This Extension

Cast to Sonos: Stream Directly from Your Browser to Sonos โ€“ Effortless & High-Quality ๐ŸŽ‰ NEW: Automatic Video Sync for all users (+Stereo for Premium) ๐ŸŽ‰ The extension now automatically measures your Sonos delay and syncs video playback to eliminate audio lag. Premium users also get stereo audio streaming up to 320 kbps. Experience seamless audio streaming to your Sonos speakers right from your Chrome browser. With Cast to Sonos, elevate your streaming experience by casting audio from any website, bringing rich, high-quality sound to your Sonos system with just a few clicks. Whether you're watching videos, listening to music, or streaming from popular sites, Cast to Sonos offers the versatility and performance Sonos users expect. For setup assistance, check our [installation instructions](https://medium.com/@casttosonos/how-to-cast-to-sonos-from-chrome-805fbc36a60d) or watch our [video tutorial](https://www.youtube.com/watch?v=IBx0BjxkfEI&t=18s). โ€”โ€”โ€”โ€”โ€”โ€”โ€”โ€” SEAMLESS SONOS INTEGRATION With Cast to Sonos, you get a smooth, integrated experience similar to using your Sonos app. Features include: โžค Household & Device Selection: Choose the Sonos household or device to stream to, allowing for easy room-to-room control. โžค Automatic Video Sync: Revolutionary frame sync technology automatically measures your Sonos delay and syncs video playback to match, eliminating audio-video lag when watching videos. โžค Automatic Color Matching: The extension adjusts its background color to match the website you're on, creating a cohesive look. โžค Dark Mode Support: Enjoy a sleek, visually comfortable experience in dark mode. โžค Dynamic Player Interface: The extension displays the current audio thumbnail and a Cast to Sonos logo in the Sonos app, creating a seamless experience. โžค Full Player Control: Play, pause, and adjust volume directly from the Sonos app or Cast to Sonos. โ€”โ€”โ€”โ€”โ€”โ€”โ€”โ€” PREMIUM AUDIO QUALITY & PERFORMANCE BOOST Upgrade to Cast to Sonos Premium for enhanced audio fidelity and stereo streaming, ensuring every note is delivered with the clarity your Sonos setup deserves. Premium users enjoy high-quality stereo audio streaming (up to 320 kbps) while free users get reliable mono audio (128 kbps). Additionally, Cast to Sonos optimizes performance by running all audio capture on a separate worker thread, minimizing any impact on browser performance. โ€”โ€”โ€”โ€”โ€”โ€”โ€”โ€” HOW TO GET STARTED The get started, please take a look at the following guide on how to install the extensions: [Installation Guide](https://medium.com/@casttosonos/how-to-cast-to-sonos-from-chrome-805fbc36a60d) Also don't forget to check out our tutorial which helps to walk you through the user interface: [Video Tutorial](https://www.youtube.com/watch?v=IBx0BjxkfEI&t=18s) For troubleshooting, ensure no other app (like Spotify or YouTube) is actively using your Sonos device. Pausing these other apps can help establish a stable connection. If that does not help, please re-install the extension and finally contact our support using either the "Support" page in the Chrome Web Store or by sending us an email at: [email protected] โ€”โ€”โ€”โ€”โ€”โ€”โ€”โ€” YOUR PRIVACY, OUR PRIORITY: A Transparent Look at How Cast to Sonos Handles Your Data We take privacy seriously and are committed to transparency about how our extension works and what data it accesses: โžค Secure Sign-In: Your login is done through the Sonos website, so we never see or store your password. You can confirm this by inspecting the login window and checking the URL to ensure it's Sonos. โžค Limited Data Storage: We only store a temporary access key to communicate with your Sonos system, with no other personal data stored. Analytics are minimal and limited strictly to operational needs. โžค Easy Data Control: Instantly revoke access through your Sonos account or directly within the extension. Right-click on the Cast to Sonos icon, select "Options," and choose "Clear data" to remove settings and access keys. For those seeking extra privacy and performance, enable the "Disable front-end scripts" option. This feature prevents the extension from adjusting background colors to your current open tab, but reduces page load times. However, this script is highly optimized and runs only after a page has fully loaded so you will probably not see a difference. โ€”โ€”โ€”โ€”โ€”โ€”โ€”โ€” PLANS & SUBSCRIPTIONS โžค Free Plan: Access basic casting features and enjoy standard audio quality. โžค Premium Trial: Explore premium audio fidelity with a free trial of our enhanced sound quality. โžค Premium Plan: Upgrade to premium for high-fidelity audio and the best streaming quality your Sonos speakers can offer. For more details and subscription options, explore the plans in the extension settings. โ€”โ€”โ€”โ€”โ€”โ€”โ€”โ€” COMPREHENSIVE SUPPORT & REGULAR UPDATES Our team is dedicated to providing a smooth experience with reliable support. Contact us anytime through the Chrome Web Store Support page, and we'll help resolve any issues. We release regular updates to address user feedback, ensure compatibility, and improve performance, so your Cast to Sonos experience keeps getting better. โ€”โ€”โ€”โ€”โ€”โ€”โ€”โ€” FAQ: Common Questions about Cast to Sonos โžค Will this replace my Sonos app? No, Cast to Sonos works alongside your Sonos app, allowing you to control playback, volume, and device selection from either platform. โžค Why is there a delay? While casting from your browser can introduce a delay due to network streaming, Cast to Sonos now automatically solves this with frame sync technology that measures your Sonos delay and syncs video playback to match. You can customize this behavior in the extension settings (right-click the extension icon and select "Options"). โ€”โ€”โ€”โ€”โ€”โ€”โ€”โ€” Transform your Sonos speakers into the ultimate browser-powered streaming system with Cast to Sonos โ€“ the essential tool for every Sonos user who wants total control and flexibility. [Installation Guide](https://medium.com/@casttosonos/how-to-cast-to-sonos-from-chrome-805fbc36a60d) | [Video Tutorial](https://www.youtube.com/watch?v=IBx0BjxkfEI&t=18s) Changelog: v1.1: * Added free mode * Added more languages * Improved error handling and error explanations * Changed font v1.2: * Improved messages and handling of rate limit errors * Fixed a bug that caused users to have to re-authenticate with Sonos * Changed icons v1.3: * Fixed an issue with translations that made it impossible for non-English users to install the extension v1.4: * Changed Dutch translations * Add dynamic background based on website contents * Removed debug information that was cluttering the debug logs * Better error handling for users that attempt to stream pages starting with chrome:// * Close the previous stream when the user starts a new stream on a new tab * Changed the icon displayed inside the Sonos app * Added an error screen when the user can not connect to the server * Added a loading screen when the app is connecting to the server * Add a dynamic icon inside the Sonos app v1.5: * Corrected incorrect title v1.6: * Remember living room and device after popup is closed * Improved speed at which the background color and thumbnail image is retrieved from the foreground webpage to +-100ms v1.7: * Improved logging for better debugging v1.8: * Added extension version number for better debugging * Retry mechanism for when fetching the user fails * Better error display, no more alert windows * Fixed an issue where the tab media stream would not stop after disabling the connection before pressing play * Prevent unnecessary network requests from the background script * Do not display the ERROR_RESOURCE_GONE error, re-fetch the households instead * Introduce a timeout for network requests of 5 seconds * Rename the native 'TypeError: Failed to fetch' error message to 'Network error', because it's confusing * Rename the native 'AbortError, DOMException, user cancelled the request' to 'Network error', because it's confusing (and not correct) * Better error handling when there are connectivity issues * Translated a few error messages which were still English-only * Handle all kind of connectivity issues and recover from network failures v1.9: * Added the ability to disable front-end scripts * Removed permissions for access to all urls, instead use the "activeTab" permission * Added a link to manage premium subscriptions to the options page * Fixed an issue with refreshing expired auth tokens and handling of invalid auth tokens v1.10 * Added rewardful for affiliate marketing * Fixed an issue with language translations which caused app installations to fail v1.11 * Changed Chrome web store category to "Entertainment" v1.12 * Streaming service upgraded and maintenance work done v1.13 * Fixed a storage limit issue which rendered the extension unusable for users with multiple households and/or devices * Improved error logging * Changed the extension description * Removed unnecessary foreground logging which caused clutter in the console v1.14 * Upgraded to carbon-neutral hosting with dedicated servers in Europe and the US for faster, more stable connections * Improved connection timeout handling - reduced failed connection attempts and error messages * Enhanced server selection - the extension now automatically chooses the best server based on your location for optimal performance * Added future support for streaming local audio files directly from your computer to Sonos speakers * Better error messages that are more helpful when streaming fails due to website restrictions * Upgraded to Node.js 24 for improved performance and security * Added automatic server health monitoring and failover capabilities * Improved extension startup time and reduced memory usage * Enhanced compatibility with more websites and audio sources * Added custom streaming endpoint option in settings for advanced users * Better handling of network interruptions and automatic reconnection * Improved audio quality and reduced streaming interruptions * Enhanced deployment automation for faster updates and bug fixes v1.15 * Added automatic frame sync to eliminate audio-video delay when watching videos * Added stereo audio streaming support for premium users (up to 320 kbps) * Added frame sync settings in options - disable, static delay, or automatic measurement * Fixed websocket cleanup issues on stream stop * Improved resource cleanup and memory management * Fixed encoder cleanup and disconnect handling * Better error handling for websocket connections v1.16 * Added support for multiple plans * Better options for user-feedback v1.17 * Fixed compatibility issue with YouTube and other websites that have strict Content Security Policies (CSP) * Extension now works reliably on YouTube and similar sites with enhanced security settings v1.18 * Migrated to a multi-plan ExtensionPay setup. v1.19 * Fixed an issue that prevented users from paying for better streaming tiers.

Detailed Findings

142 total

YARA Rule Matches

8 rules

Indicators of Compromise

Network indicators, suspicious strings, and potential IoCs extracted during analysis

URLs
22
IP Addresses
17
Domains
139
Strings
176

All Indicators ยท 176

Domain
detected Domain: ye.pe

XIOC detected Domain: ye.pe

extracted_from_files

Domain
detected Domain: this.total

XIOC detected Domain: this.total

extracted_from_files

URL
detected URL: https://casttosonos.com/articles/introducing-frame-sync-and-stereo-no-more-audio-video-delay

XIOC detected URL: https://casttosonos.com/articles/introducing-frame-sync-and-stereo-no-more-audio-video-delay

extracted_from_files

Domain
detected Domain: s.rgb.apple

XIOC detected Domain: s.rgb.apple

extracted_from_files

Domain
detected Domain: this.video

XIOC detected Domain: this.video

extracted_from_files

Domain
detected Domain: 8i.rs

XIOC detected Domain: 8i.rs

extracted_from_files

IP
detected IP: b::

XIOC detected IP: b::

extracted_from_files

IP
detected IP: 0::

XIOC detected IP: 0::

extracted_from_files

IP
detected IP: ::b

XIOC detected IP: ::b

extracted_from_files

IP
detected IP: 1::

XIOC detected IP: 1::

extracted_from_files

IP
detected IP: 8::b

XIOC detected IP: 8::b

extracted_from_files

IP
detected IP: 8::

XIOC detected IP: 8::

extracted_from_files

IP
detected IP: ::

XIOC detected IP: ::

extracted_from_files

IP
detected IP: ::af

XIOC detected IP: ::af

extracted_from_files

IP
detected IP: ed::

XIOC detected IP: ed::

extracted_from_files

IP
detected IP: e::

XIOC detected IP: e::

extracted_from_files

IP
detected IP: ::9

XIOC detected IP: ::9

extracted_from_files

IP
detected IP: 9::

XIOC detected IP: 9::

extracted_from_files

IP
detected IP: 28::

XIOC detected IP: 28::

extracted_from_files

IP
detected IP: 5::

XIOC detected IP: 5::

extracted_from_files

Domain
detected Domain: s.top

XIOC detected Domain: s.top

extracted_from_files

Domain
detected Domain: a.windows

XIOC detected Domain: a.windows

extracted_from_files

IP
detected IP: 127.0.0.1

XIOC detected IP: 127.0.0.1

extracted_from_files

URL
detected URL: https://your-custom-server.com

XIOC detected URL: https://your-custom-server.com

extracted_from_files

URL
detected URL: http://www.w3.org/2000/svg

XIOC detected URL: http://www.w3.org/2000/svg

extracted_from_files

URL
detected URL: http://www.w3.org/1999/xlink

XIOC detected URL: http://www.w3.org/1999/xlink

extracted_from_files

URL
detected URL: https://chrome.google.com/webstore/detail/cast-to-sonos/

XIOC detected URL: https://chrome.google.com/webstore/detail/cast-to-sonos/

extracted_from_files

URL
detected URL: https://api.casttosonos.com/*

XIOC detected URL: https://api.casttosonos.com/*

extracted_from_files

URL
detected URL: https://casttosonos.com/*

XIOC detected URL: https://casttosonos.com/*

extracted_from_files

URL
detected URL: https://extensionpay.com/*

XIOC detected URL: https://extensionpay.com/*

extracted_from_files

URL
detected URL: http://127.0.0.1:3000/*

XIOC detected URL: http://127.0.0.1:3000/*

extracted_from_files

URL
detected URL: http://www.mp3dev.org/

XIOC detected URL: http://www.mp3dev.org/

extracted_from_files

URL
detected URL: https://billing.stripe.com/p/login/aEUfZj2hG8ms87K144

XIOC detected URL: https://billing.stripe.com/p/login/aEUfZj2hG8ms87K144

extracted_from_files

URL
detected URL: https://casttosonos.com/articles/fixing-youtube-csp-blocking-issue

XIOC detected URL: https://casttosonos.com/articles/fixing-youtube-csp-blocking-issue

extracted_from_files

URL
detected URL: https://extensionpay.com/extension/$

XIOC detected URL: https://extensionpay.com/extension/$

extracted_from_files

URL
detected URL: https://casttosonos.com/extension/$

XIOC detected URL: https://casttosonos.com/extension/$

extracted_from_files

URL
detected URL: https://c2s-nbg1-1.casttosonos.com

XIOC detected URL: https://c2s-nbg1-1.casttosonos.com

extracted_from_files

URL
detected URL: https://casttosonos.com/icon.png

XIOC detected URL: https://casttosonos.com/icon.png

extracted_from_files

URL
detected URL: https://extensionpay.com

XIOC detected URL: https://extensionpay.com

extracted_from_files

URL
detected URL: https://clients2.google.com/service/update2/crx

XIOC detected URL: https://clients2.google.com/service/update2/crx

extracted_from_files

URL
detected URL: https://github.com/Glench/ExtPay#2-configure-your-manifestjson

XIOC detected URL: https://github.com/Glench/ExtPay#2-configure-your-manifestjson

extracted_from_files

URL
detected URL: https://c2s-ash-1.casttosonos.com

XIOC detected URL: https://c2s-ash-1.casttosonos.com

extracted_from_files

URL
detected URL: https://api.casttosonos.com

XIOC detected URL: https://api.casttosonos.com

extracted_from_files

Domain
detected Domain: github.com

XIOC detected Domain: github.com

extracted_from_files

Domain
detected Domain: o.red

XIOC detected Domain: o.red

extracted_from_files

Domain
detected Domain: n.name

XIOC detected Domain: n.name

extracted_from_files

Domain
detected Domain: u.top

XIOC detected Domain: u.top

extracted_from_files

Domain
detected Domain: r.id

XIOC detected Domain: r.id

extracted_from_files

Domain
detected Domain: o.id

XIOC detected Domain: o.id

extracted_from_files

Domain
detected Domain: t.sb

XIOC detected Domain: t.sb

extracted_from_files

Domain
detected Domain: b.ms

XIOC detected Domain: b.ms

extracted_from_files

Domain
detected Domain: t.map

XIOC detected Domain: t.map

extracted_from_files

Domain
detected Domain: n.green

XIOC detected Domain: n.green

extracted_from_files

Domain
detected Domain: o.green

XIOC detected Domain: o.green

extracted_from_files

Domain
detected Domain: n.blue

XIOC detected Domain: n.blue

extracted_from_files

Domain
detected Domain: o.blue

XIOC detected Domain: o.blue

extracted_from_files

Domain
detected Domain: s.rgb.xyz

XIOC detected Domain: s.rgb.xyz

extracted_from_files

Domain
detected Domain: s.lab.xyz

XIOC detected Domain: s.lab.xyz

extracted_from_files

Domain
detected Domain: www.w3.org

XIOC detected Domain: www.w3.org

extracted_from_files

Domain
detected Domain: chrome.google.com

XIOC detected Domain: chrome.google.com

extracted_from_files

Domain
detected Domain: e.constructor.name

XIOC detected Domain: e.constructor.name

extracted_from_files

Domain
detected Domain: array.prototype.slice.call

XIOC detected Domain: array.prototype.slice.call

extracted_from_files

Domain
detected Domain: o.to

XIOC detected Domain: o.to

extracted_from_files

Domain
detected Domain: this.color.map

XIOC detected Domain: this.color.map

extracted_from_files

Domain
detected Domain: n.red

XIOC detected Domain: n.red

extracted_from_files

Domain
detected Domain: t.mp

XIOC detected Domain: t.mp

extracted_from_files

IP
detected Domain: billing.stripe.com

XIOC detected Domain: billing.stripe.com

extracted_from_files

Domain
detected Domain: your-custom-server.com

XIOC detected Domain: your-custom-server.com

extracted_from_files

Domain
detected Domain: html.feedback

XIOC detected Domain: html.feedback

extracted_from_files

Domain
detected Domain: html.is

XIOC detected Domain: html.is

extracted_from_files

Domain
detected Domain: html.show

XIOC detected Domain: html.show

extracted_from_files

Domain
detected Domain: html.no

XIOC detected Domain: html.no

extracted_from_files

Domain
detected Domain: a.in

XIOC detected Domain: a.in

extracted_from_files

Domain
detected Domain: h.id

XIOC detected Domain: h.id

extracted_from_files

Domain
detected Domain: o.in

XIOC detected Domain: o.in

extracted_from_files

Domain
detected Domain: g.data

XIOC detected Domain: g.data

extracted_from_files

Domain
detected Domain: e.mp

XIOC detected Domain: e.mp

extracted_from_files

Domain
detected Domain: w.in

XIOC detected Domain: w.in

extracted_from_files

Domain
detected Domain: this.mp

XIOC detected Domain: this.mp

extracted_from_files

Domain
detected Domain: w.pinfo.pe

XIOC detected Domain: w.pinfo.pe

extracted_from_files

Domain
detected Domain: s.ms

XIOC detected Domain: s.ms

extracted_from_files

Domain
detected Domain: s.bo

XIOC detected Domain: s.bo

extracted_from_files

Domain
detected Domain: s.bm

XIOC detected Domain: s.bm

extracted_from_files

Domain
detected Domain: s.psy.bo

XIOC detected Domain: s.psy.bo

extracted_from_files

Domain
detected Domain: d.in

XIOC detected Domain: d.in

extracted_from_files

Domain
detected Domain: a.free

XIOC detected Domain: a.free

extracted_from_files

Domain
detected Domain: ye.pinfo.pe

XIOC detected Domain: ye.pinfo.pe

extracted_from_files

URL
detected URL: https://casttosonos.com/articles/improved-performance-with-new-carbon-neutral-hosting

XIOC detected URL: https://casttosonos.com/articles/improved-performance-with-new-carbon-neutral-hosting

extracted_from_files

Domain
detected Domain: o.bm

XIOC detected Domain: o.bm

extracted_from_files

Domain
detected Domain: o.pinfo.pe

XIOC detected Domain: o.pinfo.pe

extracted_from_files

Domain
detected Domain: ae.pinfo.energy

XIOC detected Domain: ae.pinfo.energy

extracted_from_files

Domain
detected Domain: ae.pinfo.pe

XIOC detected Domain: ae.pinfo.pe

extracted_from_files

Domain
detected Domain: ae.pe

XIOC detected Domain: ae.pe

extracted_from_files

Domain
detected Domain: this.sb

XIOC detected Domain: this.sb

extracted_from_files

Domain
detected Domain: this.bm

XIOC detected Domain: this.bm

extracted_from_files

Domain
detected Domain: this.bo

XIOC detected Domain: this.bo

extracted_from_files

Domain
detected Domain: this.pe

XIOC detected Domain: this.pe

extracted_from_files

Domain
detected Domain: e.bo

XIOC detected Domain: e.bo

extracted_from_files

Domain
detected Domain: e.psy.bo

XIOC detected Domain: e.psy.bo

extracted_from_files

Domain
detected Domain: ye.pinfo.energy

XIOC detected Domain: ye.pinfo.energy

extracted_from_files

Domain
detected Domain: o.style.top

XIOC detected Domain: o.style.top

extracted_from_files

Domain
detected Domain: r.data

XIOC detected Domain: r.data

extracted_from_files

Domain
detected Domain: b.pinfo.pe

XIOC detected Domain: b.pinfo.pe

extracted_from_files

Domain
detected Domain: b.pinfo.energy

XIOC detected Domain: b.pinfo.energy

extracted_from_files

Domain
detected Domain: this.tt

XIOC detected Domain: this.tt

extracted_from_files

Domain
detected Domain: this.bv

XIOC detected Domain: this.bv

extracted_from_files

Domain
detected Domain: this.global

XIOC detected Domain: this.global

extracted_from_files

Domain
detected Domain: this.ms

XIOC detected Domain: this.ms

extracted_from_files

Domain
detected Domain: e.tt

XIOC detected Domain: e.tt

extracted_from_files

Domain
detected Domain: r.nr

XIOC detected Domain: r.nr

extracted_from_files

Domain
detected Domain: y-n.global

XIOC detected Domain: y-n.global

extracted_from_files

Domain
detected Domain: b.global

XIOC detected Domain: b.global

extracted_from_files

Domain
detected Domain: side.tt

XIOC detected Domain: side.tt

extracted_from_files

Domain
detected Domain: this.free

XIOC detected Domain: this.free

extracted_from_files

Domain
detected Domain: this.quantize.ms

XIOC detected Domain: this.quantize.ms

extracted_from_files

Domain
detected Domain: f.tt

XIOC detected Domain: f.tt

extracted_from_files

Domain
detected Domain: this.nr

XIOC detected Domain: this.nr

extracted_from_files

Domain
detected Domain: q.fast

XIOC detected Domain: q.fast

extracted_from_files

Domain
detected Domain: e.global

XIOC detected Domain: e.global

extracted_from_files

Domain
detected Domain: t.global

XIOC detected Domain: t.global

extracted_from_files

Domain
detected Domain: p.tt

XIOC detected Domain: p.tt

extracted_from_files

Domain
detected Domain: d.global

XIOC detected Domain: d.global

extracted_from_files

Domain
detected Domain: r.tt

XIOC detected Domain: r.tt

extracted_from_files

Domain
detected Domain: e.free

XIOC detected Domain: e.free

extracted_from_files

Domain
detected Domain: e.in

XIOC detected Domain: e.in

extracted_from_files

Domain
detected Domain: t.seek

XIOC detected Domain: t.seek

extracted_from_files

Domain
detected Domain: this.in

XIOC detected Domain: this.in

extracted_from_files

Domain
detected Domain: n.global

XIOC detected Domain: n.global

extracted_from_files

Domain
detected Domain: r.global

XIOC detected Domain: r.global

extracted_from_files

Domain
detected Domain: this.best

XIOC detected Domain: this.best

extracted_from_files

Domain
detected Domain: object.prototype.hasownproperty.call

XIOC detected Domain: object.prototype.hasownproperty.call

extracted_from_files

Domain
detected Domain: c2s-nbg1-1.casttosonos.com

XIOC detected Domain: c2s-nbg1-1.casttosonos.com

extracted_from_files

Domain
detected Domain: b.pinfo.ms

XIOC detected Domain: b.pinfo.ms

extracted_from_files

Domain
detected Domain: t.total

XIOC detected Domain: t.total

extracted_from_files

Domain
detected Domain: this.st

XIOC detected Domain: this.st

extracted_from_files

Domain
detected Domain: i.st

XIOC detected Domain: i.st

extracted_from_files

Domain
detected Domain: s.st

XIOC detected Domain: s.st

extracted_from_files

Domain
detected Domain: lrm-i.st

XIOC detected Domain: lrm-i.st

extracted_from_files

Domain
detected Domain: s-i.st

XIOC detected Domain: s-i.st

extracted_from_files

Domain
detected Domain: w.ht

XIOC detected Domain: w.ht

extracted_from_files

Domain
detected Domain: t.bv

XIOC detected Domain: t.bv

extracted_from_files

Domain
detected Domain: player.casttosonos.com

XIOC detected Domain: player.casttosonos.com

extracted_from_files

Domain
detected Domain: t.data

XIOC detected Domain: t.data

extracted_from_files

Domain
detected Domain: o.data

XIOC detected Domain: o.data

extracted_from_files

Domain
detected Domain: websocket.open

XIOC detected Domain: websocket.open

extracted_from_files

Domain
detected Domain: t.data.data

XIOC detected Domain: t.data.data

extracted_from_files

Domain
detected Domain: clients2.google.com

XIOC detected Domain: clients2.google.com

extracted_from_files

Domain
detected Domain: www.mp3dev.org

XIOC detected Domain: www.mp3dev.org

extracted_from_files

Domain
detected Domain: r.map

XIOC detected Domain: r.map

extracted_from_files

Domain
detected Domain: object.hasownproperty.call

XIOC detected Domain: object.hasownproperty.call

extracted_from_files

Domain
detected Domain: s.call

XIOC detected Domain: s.call

extracted_from_files

Domain
detected Domain: a.management

XIOC detected Domain: a.management

extracted_from_files

Domain
detected Domain: extensionpay.com

XIOC detected Domain: extensionpay.com

extracted_from_files

Domain
detected Domain: casttosonos.com

XIOC detected Domain: casttosonos.com

extracted_from_files

Domain
detected Domain: t.style.top

XIOC detected Domain: t.style.top

extracted_from_files

Domain
detected Domain: t.tab.id

XIOC detected Domain: t.tab.id

extracted_from_files

Domain
detected Domain: t.tab

XIOC detected Domain: t.tab

extracted_from_files

Domain
detected Domain: e.id

XIOC detected Domain: e.id

extracted_from_files

Domain
detected Domain: t.id

XIOC detected Domain: t.id

extracted_from_files

Domain
detected Domain: t.name

XIOC detected Domain: t.name

extracted_from_files

Domain
detected Domain: chrome.windows

XIOC detected Domain: chrome.windows

extracted_from_files

Domain
detected Domain: a.top

XIOC detected Domain: a.top

extracted_from_files

Domain
detected Domain: c2s-ash-1.casttosonos.com

XIOC detected Domain: c2s-ash-1.casttosonos.com

extracted_from_files

Domain
detected Domain: performance.now

XIOC detected Domain: performance.now

extracted_from_files

Domain
detected Domain: a.name

XIOC detected Domain: a.name

extracted_from_files

Domain
detected Domain: e.map

XIOC detected Domain: e.map

extracted_from_files

Domain
detected Domain: date.now

XIOC detected Domain: date.now

extracted_from_files

Domain
detected Domain: api.casttosonos.com

XIOC detected Domain: api.casttosonos.com

extracted_from_files

Domain
detected Domain: e.name

XIOC detected Domain: e.name

extracted_from_files

Domain
detected Domain: window.open

XIOC detected Domain: window.open

extracted_from_files

Domain
detected Domain: n.run

XIOC detected Domain: n.run

extracted_from_files

Domain
detected Domain: e.data

XIOC detected Domain: e.data

extracted_from_files

Domain
detected Domain: r.call

XIOC detected Domain: r.call

extracted_from_files

Domain
detected Domain: chrome.runtime.id

XIOC detected Domain: chrome.runtime.id

extracted_from_files

Domain
detected Domain: s.tt

XIOC detected Domain: s.tt

extracted_from_files

Domain
detected Domain: e.bv

XIOC detected Domain: e.bv

extracted_from_files

Security Analysis Summary

Security Analysis Overview

Cast to Sonos is a Chrome Web Store extension published by [email protected]. Version 1.19 has been analyzed by the Risky Plugins security platform, receiving a risk score of 100/100 (CRITICAL risk) based on 322 security findings.

Risk Assessment

This extension presents critical security risk. Severe issues were detected, potentially including malware indicators, exposed secrets, or dangerous behaviors. Installation is strongly discouraged until these issues are addressed.

Findings Breakdown

  • Medium: 184 finding(s)
  • Low: 138 finding(s)

What Was Analyzed

The security assessment covers multiple analysis categories:

  • Malware Detection: YARA rule matching against 2,400+ malware signatures
  • Secret Detection: Scanning for exposed API keys, tokens, and credentials
  • Static Analysis: Code-level security analysis for common vulnerability patterns
  • Network Analysis: Detection of suspicious network communications and endpoints
  • Obfuscation Detection: Identification of code obfuscation techniques

Developer Information

Cast to Sonos is published by [email protected] on the Chrome Web Store marketplace. The extension has approximately 10K users.

Recommendation

This extension is not recommended for installation without thorough manual review. Consider alternatives with lower risk scores, or contact the developer to address the identified security concerns.

Frequently Asked Questions