Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Free Vpn Proxy Extension

CRITICAL RISKRemoved from Chrome Web Store

Free Vpn Proxy Extension

ID: dceefkagippahflahjkiapelilbalpmo

Could be malicious

Supported Languages

🇧🇩Bengali

🇧🇷Brazilian Portuguese

🇬🇧British English

🇧🇬Bulgarian

🇪🇸Catalan

🇨🇳Chinese (Simplified)

🇹🇼Chinese (Traditional)

🇭🇷Croatian

🇨🇿Czech

🇩🇰Danish

🇳🇱Dutch

🇺🇸English

🇪🇪Estonian

🇵🇭Filipino

🇫🇮Finnish

🇫🇷French

🇩🇪German

🇬🇷Greek

🇮🇳Gujarati

🇮🇳Hindi

🇭🇺Hungarian

🇮🇩Indonesian

🇮🇹Italian

🇯🇵Japanese

🇰🇷Korean

🇲🇽Latin American Spanish

🇱🇻Latvian

🇱🇹Lithuanian

🇲🇾Malay

🇮🇳Malayalam

🇮🇳Marathi

🇳🇴Norwegian

🇵🇱Polish

🇵🇹Portuguese

🇷🇴Romanian

🇷🇺Russian

🇷🇸Serbian

🇸🇰Slovak

🇸🇮Slovenian

🇪🇸Spanish

🇸🇪Swedish

🇮🇳Tamil

🇮🇳Telugu

🇹🇭Thai

🇹🇷Turkish

🇺🇦Ukrainian

🇺🇸US English

🇻🇳Vietnamese

Extension Info & Metadata

Status

Removed

Version

1.5

Size

0.59 MB

Rating

3.3/5

Reviews

Users

19,934

Type

Extension

Updated

Feb 13, 2023

Publisher Contextual Analysis

Trusted

Author: Chrome extensions 2022View Profile
Privacy: Privacy Policy
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

73,995

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Safe, unlimited, and free VPN service. Change your IP addresss with free VPN

Free VPN for Chrome is the fastest and easy in using Proxy service starts working by one click in your browser. The friendly design allows you to change the current IP address by choosing another country from the wide list right in the extension menu to unlock websites that are prohibited in your location. Simply mark to contry to connect random IP address in order to just hide your connection. It's fully free VPN without registration, credit cards and ads. Click "Add to Chrome" right now and get unlimited VPN service for free. fastest and simplest FREE Chrome VPN. Unblock any website and browse the web private and secure ! Open all fringes of web browsing without any restriction absolutely secured and anonymously as well as unblock any website and receive all information from different sources as it should be in modern society. Our VPN extension for Chrome switches your virtual location and changes your IP address to one from our remote servers. Encrypt your connection & unblock websites easily. VPN for Chrome is the fastest and easy in using Proxy service starts working by one click in your browser. The friendly design allows you to change the current IP address by choosing another country from the wide list right in the extension menu to unlock websites that are prohibited in your location. Surf, browse, get access to any website without limits and registrations, reliable, many servers in different countries let me open all blocked sites, plus it does not affect or slow browsing speed. Was designed on the edge of cyber security technologies as an evolution of restrictions bypass extension for the most popular websites. The most trusted, reliable and protected Proxy extension CIS countries is now available worldwide. With unlimited VPN you can unblock, bypass government constraints and access any website anonymously,free and with no connection restrictions. Experience the easiest-to-use VPN extension. To get started, install the extension from Chrome store or official website absolutely FREE with a single click, choose the location of your choice or pick from the preloaded list of popular websites Stay anonymous, secured and unrestricted! Unblock any website with unlimited VPN service. Please leave us a rating and a comment !!!

User Growth

Showing data from Jan 01, 2022 to Dec 31, 2022

Versions

+711.64%(+17,478 users)

Compared to 3 months ago

2 versions released in this period

Rating Count

Total: 26 ratings+1 (4%)

Average Rating

Current: 3.27 / 5.0-0.56

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical4

High1

Medium2

Low0

Versions scanned

Showing 1 of 4 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1.4 Code review	7

Extension Version	Code Review Findings
1.4	7

Files with findings

3 distinct paths — top paths by unique finding count:

list/background.js4
js/background.js2
js/content.js1

S.No.	Category	Severity	File	Summary	Found in Version
1	Network Interception	critical	list/background.js (line 8463)	The extension hooks chrome.tabs.onUpdated and silently rewrites the URL of any tab whose address matches one of ~1,355 hard-coded regex rules by calling chrome.tabs.update with a different URL. This functionality is u…	1.4
2	Network Interception	critical	list/background.js (line 8394)	matchUrl iterates the bundled rule list and rewrites visited URLs via RegExp.replace, returning a destination URL chosen by the attacker. Because src patterns are unanchored regexes (e.g. 'walmart.com/orders.step.cart…	1.4
3	Phishing	critical	list/background.js (line 2)	The bundled defaultOptions ships ~1,355 regex rules whose src patterns target cart/checkout/login pages of hundreds of e-commerce merchants (Walmart, Etsy, Adobe Commerce, Airbnb, Agoda, Alibaba, Apple Music, GearBest…	1.4
4	Phishing	critical	list/background.js (line 8356)	The tail of the rule set targets major global merchants — Walmart cart and 'my-items', Agoda flights, Etsy cart — sending the user to gidan.ro/<merchant> at the moment they are about to transact. This is a high-impact…	1.4
5	Network Interception	high	js/background.js (line 2506)	The proxy list is fetched from a remote attacker-controllable endpoint (api.nucleusvpn.com) and the host:port pair is then injected directly into a dynamically built PAC script string and into chrome.proxy.settings.se…	1.4
6	Code Injection	medium	js/content.js (line 929)	The content script is registered with all_frames:true, match_about_blank:true, run_at:document_start across http(s):/// and injects HTML via insertAdjacentHTML on every frame. The injection content here is benign (a…	1.4
7	Tracking	medium	js/background.js (line 1495)	The background service worker mints a persistent UUID 'cid' in chrome.storage.local on first install and POSTs it to www.google-analytics.com/collect (UA-237899972-1) as a Measurement Protocol pageview. This creates a…	1.4

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


getbootstrap.com	-	https://getbootstrap.com/
github.com	/twbs/bootstrap/blob/main/LICENSE	https://github.com/twbs/bootstrap/blob/main/LICENSE
www.w3.org	/2000/svg	http://www.w3.org/2000/svg
www.w3.org	/Graphics/SVG/1.1/DTD/svg11.dtd	http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd
www.w3.org	/1999/xlink	http://www.w3.org/1999/xlink
github.com	/uuidjs/uuid	https://github.com/uuidjs/uuid#getrandomvalues-not-supported
developer.mozilla.org	/docs/Mozilla/Add-ons/WebExtensions/API/runtime/onMessage	https://developer.mozilla.org/docs/Mozilla/Add-ons/WebExtensions/API/runtime/onMessage
www.google-analytics.com	/collect	https://www.google-analytics.com/collect?${new
chrome.google.com	/webstore	https://chrome.google.com/webstore
api.nucleusvpn.com	/api/proxy	https://api.nucleusvpn.com/api/proxy

Showing 1 to 10 of 30 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


14.1.1.9	IPv4	-
3.234.237.16	IPv4	-

2.2 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

This its a nice chrome extension vpn 5 stars from me!

andreas vamos·1 Feb 2023

Не работае��

БМ

Бацька Мін��кі·10 Jan 2023

Не работает

БМ

Бацька Мінскі·10 Jan 2023

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Free Vpn Proxy Extension

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 4 Versions7

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating