Chrome Web Store
2Versions
0Code reviewed

Not reviewed

No code review on record

We have not reviewed this extension’s code, so we cannot vouch for it either way. Check the permissions below to decide whether it asks for more than it needs.

Want us to read this extension's code? Ask for a review and we'll queue it.

5 indicators in this extension

5 indicators
0 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

What our analysis found

Piligrim — Free Gamified VPN is not yet reviewed by Extension Auditor. Its permissions mean it can read and change data on all websites and can observe network requests. It comes from a publisher with 2 extensions and was last updated in June 2026.

Piligrim — Free Gamified VPN

Piligrim — Free Gamified VPN Chrome extension security report

ID: ffeeaccmegmlgjboppflieinleebdjfj

Extension Info & Metadata

Status
Active
Version
0.1.1
Size
0.16 MB
Rating
3.4/5
Reviews
5
Users
416
Type
Extension
Updated
Jun 3, 2026
Category
Tools
Price
Free
Featured
No
Visibility
Listed
Mature
No
By Google
No
Trusted
No
This publisherTrack record
2extensions
All still listed

Publisher Contextual Analysis

Author
Madfish Solutions
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
No
Mailbox exists
Yes
Website
Visit
Extensions
2
Active
2
Obsolete
0
Listed
2
Unlisted
0
Users
420

Screenshots & videos

Screenshot 1
Screenshot 2
Screenshot 3
Screenshot 4
Screenshot 5

Install growth

Item
Type
Severity
Description
declarativeNetRequest
Permission
Critical
This permission allows the extension to define rules to block, redirect, or modify network requests. Rated Critical because it can control all network traffic, potentially blocking security updates or redirecting to malicious sites.
proxy
Permission
Critical
This permission allows the extension to control the browser's proxy settings. Rated Critical because it can route all traffic through potentially malicious proxies, enabling man-in-the-middle attacks and traffic monitoring.
webRequest
Permission
Critical
This permission enables the extension to monitor and analyze all web requests made by the browser. Rated Critical because it can observe all network traffic including sensitive data, track browsing behavior, and gather authentication tokens.
webRequestAuthProvider
Permission
Critical
This permission allows the extension to handle authentication requests and modify authentication headers. Rated Critical because it can intercept login credentials, session tokens, and modify authentication flows to compromise accounts.
<all_urls>
Host
Critical
Broad host access — the extension can read/modify content on every website.
Contextual Risk Factors
Risk Factor
High
The following context increases the overall risk:• 10% increase: Early script execution enables pre-emptive content manipulation
Broad Host Permissions
Risk Factor
High
This extension has broad host permissions allowing it to access many or all websites.
Broad Content Script Access
Risk Factor
High
This extension can inject scripts into any website.
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
activeTab
Permission
Medium
This permission grants temporary access to the current tab. Rated Medium because it can access current page content when invoked, though limited to user-initiated actions.
tabs
Permission
Medium
This permission enables tab management and monitoring. Rated Medium because it can track open tabs, access tab metadata, and monitor user browsing patterns.
Early Content Script Execution
Risk Factor
Medium
This extension runs content scripts at document_start.
idle
Permission
Low
This permission detects system idle state. Rated Low because it only observes user activity state without access to activity details.
alarms
Permission
Low
This permission schedules periodic tasks. Rated Low because it can only trigger events at specified times without access to sensitive data.

5 indicators in this extension

5 indicators
0 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

About this extension

For the modern wanderer. The open web is your road; Pilgrim is your cloak. Earn megabytes in Sanctums across 20+ countries.

Read the publisher’s full description

═══ Piligrim ═══ A free VPN for the modern wanderer. The open web is a road. Every tab is a journey across borders. Every Sanctum is a country where you can rest, unseen. Every Step earned is a mile already walked. ◆ WHAT PILIGRIM IS Piligrim is a browser-based VPN that routes your traffic through residential proxies in 20+ countries — what we call Sanctums. Pick where you want to appear from, embark in one click, and the open web sees you arriving from there. The twist: instead of charging you, we let you earn. While Piligrim is on, we quietly replace a small number of display ads on the sites you visit (max 3 per page). Each ad you actually see — measured against the industry-standard viewability bar — credits 1 to 10 MB of premium VPN traffic to your wallet, depending on the tier of your country. ◆ TWO WALLETS, ONE EXTENSION ▸ Free quota — Datacenter VPN 10 GB on install. 1 GB more every 24 hours, claimable in one tap. Stacks forever, never expires. Fast and broadly compatible. ▸ Steps — Residential VPN Earned from displayed ads. Routed through real consumer-ISP residential IPs — virtually indistinguishable from any other home internet. Great when datacenter ranges get blocked (streaming, banking, ticket sites). Both stack. Both are yours forever. The only way the balance ever drops is if you spend it on actual traffic. ◆ THE JOURNEY Piligrim borrows its language from old pilgrimages on purpose. • Embark / Return — start or stop the VPN • Sanctum — a country you can route through • Step — 1 MB of premium VPN traffic • Path — the tier of your country (Bronze · Copper · Silver · Gold) It's not just decoration. We're building a journey, not a utility. Daily rituals, character progression, milestones — the gamification layer turns staying private into something you'd actually return to. ◆ PRIVACY, PLAINLY What we do NOT collect: – Page URLs, query parameters, content, cookies, forms – Personal info (no name, email, phone, account required) – Cross-site behavior, fingerprinting, ad-tech identifiers What we DO store, transparently: – An anonymous install ID generated locally – Your country (for ad rates) – Bare domain names of pages visited while VPN is on – Ad-view events you generate, signed cryptographically That's the entire list. Four data points. Enforced in code via ECDSA signing, sandboxed iframes, and MV3 declarative blocking — not just promised in a paragraph of policy. Full Privacy Policy and Terms of Service are accessible from the extension popup's About panel. GDPR · UK GDPR · CCPA · BVI Data Protection Act 2021 compliant. You can revoke everything by uninstalling — there is no server-side handle on your identity beyond what the install gave us. ◆ WHO PILIGRIM IS NOT FOR Piligrim is a casual-use, free VPN. It is not a privacy weapon. If you need protection adequate for high-stakes situations — journalism in authoritarian regimes, whistleblowing, evading state surveillance — please use a paid commercial VPN designed for that purpose. Piligrim is a road, not a fortress. ◆ HOW IT WORKS Piligrim routes your traffic through a partner residential proxy network. On sites that work with our ad partners, a small number of display ads are shown by Piligrim instead of going through the publisher's usual ad chain. Premium news publishers and the ad networks' own properties are never modified. Each displayed ad you actually see — viewable for at least 1 second at ≥50% of the slot in viewport — credits Steps to your wallet via a cryptographically signed receipt. The signature can't be forged by a bot; we verify every claim server-side. ◆ THE PILIGRIM SPIRIT There's a quiet idea behind all this. The open web used to be a place you travelled to. You'd visit a forum, a stranger's blog, a homepage that loaded slowly because someone made it. Then it became a corridor of extraction — ads, trackers, prompts, walled gardens, paywalls, dark patterns. Piligrim is an attempt to give a little of that road back. To make moving across the web feel like a journey again — one with a companion, a path, and a balance you carry forward instead of a bill that comes due. Walk slowly. The lamp on the staff is steady. ◆ INSTALL One click. Grant blessing on the consent screen. You start with 10 GB. Embark anywhere in 20+ countries. Earn as you go. Stop anytime by uninstalling. The road is open. ◆ ABOUT Piligrim is published by a BVI-incorporated company. Full corporate details — registration number, registered office, EU representative under GDPR Article 27 — are listed in the Terms of Service linked from the extension popup. Website: https://piligrim.surf Privacy Policy: https://api.piligrim.surf/v1/legal/privacy Terms of Service: https://api.piligrim.surf/v1/legal/terms

User reviews

Extension files

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

URLs
4
IPv4
1

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found
No IP addresses found

5 indicators in this extension

5 indicators
0 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe
Version
Size
Verdict
Findings
Permhash
0.1.1
Latest
0.16 MBNot scanned—
b4a1fb32c4331726c52899d452205601bda5a6e2215f7c338d060d3a2b478d6a
0.0.3
0.15 MBNot scanned—
b4a1fb32c4331726c52899d452205601bda5a6e2215f7c338d060d3a2b478d6a
Showing 1 to 2 of 10 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

Gain full insight into all external connections.

Upgrade for full visibility.