It looks like this happens when you use the web version of Lastpass available on their website, not through the extension. I've been able to confirm when you u

It looks like this happens when you use the web version of Lastpass available on their website, not through the extension. I've been able to confirm when you update a site through the web interface it makes a POST request to https://lastpass.com/show_website.php https://lastpass.com/show_website.php with the `url` parameter which contains the hex-encoded URL of the website. I think the author is correct about this.