Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Magic VPN - Best Free VPN for Chrome

CRITICAL RISKRemoved from Chrome Web Store

Magic VPN - Best Free VPN for Chrome

ID: glnhjppnpgfaapdemcpihhkobagpnfee

Could be malicious

Supported Languages

🇪🇹Amharic

🇸🇦Arabic

🇧🇩Bengali

🇧🇷Brazilian Portuguese

🇬🇧British English

🇧🇬Bulgarian

🇪🇸Catalan

🇨🇳Chinese (Simplified)

🇹🇼Chinese (Traditional)

🇭🇷Croatian

🇨🇿Czech

🇩🇰Danish

🇳🇱Dutch

🇺🇸English

🇪🇪Estonian

🇵🇭Filipino

🇫🇮Finnish

🇫🇷French

🇩🇪German

🇬🇷Greek

🇮🇳Gujarati

🇮🇱Hebrew

🇮🇳Hindi

🇭🇺Hungarian

🇮🇩Indonesian

🇮🇹Italian

🇯🇵Japanese

🇮🇳Kannada

🇰🇷Korean

🇱🇻Latvian

🇱🇹Lithuanian

🇲🇾Malay

🇮🇳Malayalam

🇮🇳Marathi

🇳🇴Norwegian

🇮🇷Persian

🇵🇱Polish

🇵🇹Portuguese

🇷🇴Romanian

🇷🇺Russian

🇷🇸Serbian

🇸🇰Slovak

🇸🇮Slovenian

🇪🇸Spanish

🇰🇪Swahili

🇸🇪Swedish

🇮🇳Tamil

🇮🇳Telugu

🇹🇭Thai

🇹🇷Turkish

🇺🇦Ukrainian

🇺🇸US English

🇻🇳Vietnamese

Extension Info & Metadata

Status

Removed

Version

1.0.12

Size

0.09 MB

Rating

2.0/5

Reviews

Users

5,000

Type

Extension

Updated

May 12, 2023

Publisher Contextual Analysis

Author: https://greenhubtx.gaView Profile
Privacy: Privacy Policy
Country: United States
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes
Address: San Jose Sunnyvale, CA 94024 United States
Website: Visit

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

16,000

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Free and secure proxy accelerator plug-in, protect your privacy and enjoy unrestricted Internet services.

Magic VPN expand your online freedom at the same time with easy-to-use and lighting-fast VPN extension for Chrome browser! Protect your internet connection and scure sensitive data. Unblock any website that has blokced by your country,school or company with just single clik. ✔️Unlimited traffic Visit as many sites as you want,download any files - we do not set any limits. ✔️Free access 100% free. No credit card information is required. No personal information is required. ✔️Easy Unlock the site and access the world by clicking the "Connect" button. ✔️Secure Our strong SSL encryption will keep you completely anonymous and secure. More reasons why you need Magic VPN: - Advanced privacy protection - Unlock websites and browse content - Fast and unlimited flow - No log policy Plase rate as a 5 start and leave feedback to improve the service.

User Growth

Showing data from Jul 14, 2022 to Jul 20, 2023

Versions

No change in user count

Compared to 3 months ago

5 versions released in this period

Rating Count

Total: 5 ratings

Average Rating

Current: 2.40 / 5.0+2.40

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical5

High4

Medium0

Low0

Versions scanned

Showing 1 of 5 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1.0.11 Code review	9

Extension Version	Code Review Findings
1.0.11	9

Files with findings

2 distinct paths — top paths by unique finding count:

js/background.js7
js/options.89fb8498.js2

S.No.	Category	Severity	File	Summary	Found in Version
1	Network Interception	critical	js/background.js (line 148)	A hardcoded 'LUMINATE_PROXY_CONFIG' pointing to 'aproxy.mgreen.cf:58124' is used as a fallback ads proxy. LUMINATE is a known residential proxy network associated with ad fraud. When a remotely-controlled flag 'isOpen…	1.0.11
2	Network Interception	critical	js/background.js (line 140)	The extension generates PAC scripts that silently intercept and proxy all traffic destined for major ad networks (DoubleClick, Google Ads, rtmark.net, and several suspicious domains like offfurreton.com and vooculok.c…	1.0.11
3	Network Interception	critical	js/background.js (line 279)	The 'initAdsProxy' function is called from the options iframe with a remotely-supplied 'switch' flag and proxy list from the server's node configuration. When enabled and the user is not in the US, it activates the se…	1.0.11
4	Privilege Escalation	critical	js/options.89fb8498.js (line 123)	The extension creates a full privilege bridge to the externally hosted iframe: messages from the iframe (origin not validated) can read or write any chrome.storage.local value ('getStorageLocal'/'setStoreLocal'), send…	1.0.11
5	Remote Code Loading	critical	js/options.89fb8498.js (line 104)	The entire options UI is loaded into an iframe from an external server ('options.discordmate.com'), and the target URL can be overridden via a storage key 'optionsUrl' set by a prior remote fetch — effectively allowin…	1.0.11
6	Tracking	high	js/background.js (line 498)	A covert pixel tracking beacon fires on every user event (install, daily activation, VPN connect/disconnect, connection time, etc.) to a CloudFront-hosted URL ('d17mdabr0wdh70.cloudfront.net/p.gif'), transmitting the …	1.0.11
7	Tracking	high	js/background.js (line 607)	The tracking system records every URL a user attempts to 'unblock' and sends it — along with the user's UID, IP, and session metadata — to the operator's pixel tracking server. This exposes the user's browsing intent …	1.0.11
8	Unauthorized Data Collection	high	js/background.js (line 407)	On every install and startup, the extension fetches the user's real IP address and country from ipinfo.io and persists them to local storage. This geolocation data is subsequently attached to every tracking beacon sen…	1.0.11
9	Unauthorized Data Collection	high	js/background.js (line 797)	Immediately on install, the extension silently harvests and stores the user's real IP address and country (from ipinfo.io), records a persistent install timestamp, generates a tracking UID, and fires an install tracki…	1.0.11

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


ipinfo.io	/json	https://ipinfo.io/json
github.com	/uuidjs/uuid	https://github.com/uuidjs/uuid#getrandomvalues-not-supported
d17mdabr0wdh70.cloudfront.net	/p.gif	https://d17mdabr0wdh70.cloudfront.net/p.gif
www.google-analytics.com	-	https://www.google-analytics.com
mths.be	/punycode	https://mths.be/punycode
chrome.google.com	/webstore/detail/magic-vpn-best-free-vpn-f/glnhjppnpgfaapdemcpihhkobagpnfee	https://chrome.google.com/webstore/detail/magic-vpn-best-free-vpn-f/glnhjppnpgfaapdemcpihhkobagpnfee
feross.org	/opensource	https://feross.org/opensource
example.com	-	https://example.com
feross.org	-	http://feross.org
options.pincase.xyz	/MG_CHROME/$%7Bchrome.runtime.getManifest(	https://options.pincase.xyz/MG_CHROME/${chrome.runtime.getManifest(

Showing 1 to 10 of 20 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


127.0.0.1	IPv4	-

2.5 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

福力来袭！需要获取的，右上角搜索扩展 ilink网络加速器，来自香港，全球互联，8k视频随你看，注册即可免费使用，永不过期，免费分享，错过太可惜了超稳，电脑手机通用，极其方便，开发者必备，各种网站随便浏览，不需要填任何邀请码

资

资深嫖客·28 Jun 2024

福力来袭！需要获取的，右上角搜索扩展 ilink网络加速器，来自香港��全球互联，8k视频随你看，注册即可免费使用，永不过期，免费分享，错过太可惜了超稳，电脑手机通用，极其方便，开发者必备，各种网站随便浏览，不需要填任何邀请码

资

资深嫖客·28 Jun 2024

подобный мусор вообще не должен засорять магазин, проходите мимо! кста, в подобн��м дизайне еще несколько т��ких же бесполезных фекалий тут чередуется ((

Finn Mertens

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Magic VPN - Best Free VPN for Chrome

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 5 Versions9

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating