Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Flash VPN - Free VPN Connection

CRITICAL RISKRemoved from Chrome Web Store

Flash VPN - Free VPN Connection

ID: noaflfgdoindheknalgiekgjlfdecogn

Could be malicious

Supported Languages

🇧🇩Bengali

🇧🇷Brazilian Portuguese

🇬🇧British English

🇧🇬Bulgarian

🇪🇸Catalan

🇨🇳Chinese (Simplified)

🇹🇼Chinese (Traditional)

🇭🇷Croatian

🇨🇿Czech

🇩🇰Danish

🇳🇱Dutch

🇺🇸English

🇪🇪Estonian

🇵🇭Filipino

🇫🇮Finnish

🇫🇷French

🇩🇪German

🇬🇷Greek

🇮🇳Gujarati

🇮🇳Hindi

🇭🇺Hungarian

🇮🇩Indonesian

🇮🇹Italian

🇯🇵Japanese

🇰🇷Korean

🇲🇽Latin American Spanish

🇱🇻Latvian

🇱🇹Lithuanian

🇲🇾Malay

🇮🇳Malayalam

🇮🇳Marathi

🇳🇴Norwegian

🇵🇱Polish

🇵🇹Portuguese

🇷🇴Romanian

🇷🇺Russian

🇷🇸Serbian

🇸🇰Slovak

🇸🇮Slovenian

🇪🇸Spanish

🇸🇪Swedish

🇮🇳Tamil

🇮🇳Telugu

🇹🇭Thai

🇹🇷Turkish

🇺🇦Ukrainian

🇺🇸US English

🇻🇳Vietnamese

Extension Info & Metadata

Status

Removed

Version

1.4.2

Size

1.12 MB

Rating

4.0/5

Reviews

416

Users

200,000

Type

Extension

Updated

Apr 22, 2022

Publisher Contextual Analysis

Author: http://flashvpn.liView Profile
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

200,000

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Free and secured vpn connection with a wide choice of GEO. It’s an unlimited vpn proxy service to change ip address.

Free VPN for Chrome browser allows you to surf the web securely by change ip address. It's a fast and simple in using proxy with broad variety of GEOs to choose exactly needed location. Advanced functionality that make this service suitable for everyone. We made a VPN service that can be used for free and without registration. Click the icon and select the country you want to connect. It's an unlimited proxy, so you can connect as many times as needed without signing up. With Flash VPN you can hide the real ip address and unblock websites restricted in your country or just browsing securely and privately. Please rate as a 5 start and leave feedback to improve the service.

User Growth

Showing data from Jan 01, 2022 to May 03, 2022

Versions

No change in user count

Compared to 3 months ago

6 versions released in this period

Rating Count

Total: 416 ratings-2 (0%)

Average Rating

Current: 3.98 / 5.0-0.08

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical1

High2

Medium1

Low0

Versions scanned

Showing 1 of 6 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1.0 Code review	4

Extension Version	Code Review Findings
1.0	4

Files with findings

1 distinct path — top paths by unique finding count:

js/background.js4

S.No.	Category	Severity	File	Summary	Found in Version
1	Network Interception	critical	js/background.js (line 6487)	When enabled, the extension registers a blocking authentication handler for every HTTP and HTTPS request and injects hardcoded proxy credentials. In the same flow it installs a PAC script, giving the extension the abi…	1.0
2	Network Interception	high	js/background.js (line 6400)	This code strips arbitrary response headers from every visited URL using a blocking webRequest hook. Because the header names come from `storage.validateFields`, which is later populated from remote config, the operat…	1.0
3	Tracking	high	js/background.js (line 6702)	The extension periodically sends a base64-encoded telemetry blob containing the extension ID, version, timestamps, and a `uid` to `flashvpn.li`. It then trusts every key returned by the remote `/api/config/` endpoint …	1.0
4	Unauthorized Data Collection	medium	js/background.js (line 6735)	This probes `chrome-extension://<id>/manifest.json` for arbitrary extension IDs and infers presence from the resulting error behavior. That is a form of local environment fingerprinting that can be used to inventory o…	1.0

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


www.w3.org	/1999/02/22-rdf-syntax-ns	http://www.w3.org/1999/02/22-rdf-syntax-ns#
ns.adobe.com	/xap/1.0/	http://ns.adobe.com/xap/1.0/
ns.adobe.com	/xap/1.0/mm/	http://ns.adobe.com/xap/1.0/mm/
ns.adobe.com	/xap/1.0/sType/ResourceRef	http://ns.adobe.com/xap/1.0/sType/ResourceRef#
www.w3.org	/2000/svg	http://www.w3.org/2000/svg
www.w3.org	/1999/xlink	http://www.w3.org/1999/xlink
materializecss.com	-	http://materializecss.com
raw.githubusercontent.com	/Dogfalo/materialize/master/LICENSE	https://raw.githubusercontent.com/Dogfalo/materialize/master/LICENSE
materializecss.com	-	http://materializecss.com/
materializecss.com	/res/materialize.svg	http://materializecss.com/res/materialize.svg

Showing 1 to 10 of 60 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


154.92.114.58	IPv4	-
154.92.114.148	IPv4	-
154.92.114.250	IPv4	-
154.92.114.13	IPv4	-
154.92.112.219	IPv4	-
154.92.112.68	IPv4	-
154.92.116.163	IPv4	-
37.35.41.208	IPv4	-
37.35.43.119	IPv4	-
37.35.43.121	IPv4	-
37.35.43.158	IPv4	-
37.35.41.148	IPv4	-
37.35.42.114	IPv4	-
37.35.43.145	IPv4	-
5.154.253.114	IPv4	-
5.154.253.227	IPv4	-
156.238.7.181	IPv4	-
156.238.7.225	IPv4	-
156.238.7.61	IPv4	-
156.238.7.217	IPv4	-
156.238.7.71	IPv4	-
156.238.5.119	IPv4	-
154.85.100.161	IPv4	-
154.85.101.78	IPv4	-
154.85.101.43	IPv4	-
154.85.101.192	IPv4	-
154.95.1.80	IPv4	-
194.31.162.206	IPv4	-
154.95.1.145	IPv4	-
154.95.0.97	IPv4	-
154.95.38.222	IPv4	-
156.238.10.30	IPv4	-
156.238.10.185	IPv4	-
194.31.162.99	IPv4	-
95.164.234.178	IPv4	-
95.164.234.136	IPv4	-
95.164.234.70	IPv4	-
23.236.216.118	IPv4	-
144.168.149.138	IPv4	-
144.168.149.12	IPv4	-
95.164.232.101	IPv4	-
23.236.216.47	IPv4	-
45.72.55.64	IPv4	-
45.72.55.33	IPv4	-

Showing 1 to 44 of 50 rows

Rows per page:

1.5 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

Параша ваще не пашет

Neszavoda·30 Apr 2022

Пара��а ваще н�� пашет

Neszavoda·30 Apr 2022

Параша ваще н�� пашет

Neszavoda·30 Apr 2022

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Flash VPN - Free VPN Connection

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 6 Versions4

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Growth

Rating Count

Average Rating

User Reviews