Chrome Web StoreNo malware found
In code review
Our reviewer read this extension’s code and found no malicious behaviour. An automated risk flag was reviewed and overturned.
1 high-severity finding in this extension’s code
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
What our analysis found
UltraSurf Security, Privacy & Freedom VPN, used by 900,000 people, showed no malicious code in Extension Auditor's review. Our code review reported 2 findings (1 high, 1 medium), led by other. It comes from a trusted publisher and was last updated in April 2026.
Key findings
- High
Other
The permissions and host_permissions declared in the original extension package differ from those listed in the Chrome Web Store listing. The live listing claims the extension requires '<all_urls>' and 'webRequest', while the actual code only asks for specific host_permissions and 'tabs'/'webNavigation'. This mismatch could mislead users and violates Store policies requiring accuracy.
- Medium
Unauthorized Data Collection
The Safe Browsing feature sends a unique user identifier (userId) along with browsing URLs and referrers to [domain withheld]. The CWS data collection declaration states 'none declared', and the in-app disclosure only mentions sending URL and referrer. The addition of a persistent user ID constitutes undisclosed data collection and could enable tracking.
Analyst notes
The extension is a legitimate VPN tool with 900k+ users and a 4.6 rating. It uses proxy, webNavigation, tabs, storage, and alarms in a transparent manner: proxy for VPN tunneling, for an optional Safe Browsing feature, storage for settings, alarms for periodic health checks. All network requests target the publisher's own infrastructure ([domain withheld],, [domain withheld]) or are required for VPN connectivity. The code is clean, unminified, and well-commented. The ML model and risk-engine flagged permissions typical of VPNs without evaluating the actual functionality. The manifest mismatch between the live listing and the bundled package is a listing hygiene issue, not a sign of malware. The undisclosed user ID in Safe Browsing requests is a privacy oversight but does not indicate malicious intent.
UltraSurf Security, Privacy & Freedom VPN Chrome extension security report
ID: mjnbclmflcpookeapghfhapeffmpodij
Supported Languages
Extension Info & Metadata
Publisher Contextual Analysis
- Author
- Ultrareach
- Privacy
- Privacy Policy
- MX records exist
- Yes
- Domain exists
- Yes
- Is disposable
- No
- Is role-based
- No
- Mailbox exists
- Yes
- Website
- Visit
Screenshots & videos
Install growth
Sensitive Domain Access
This extension has access to the following sensitive domains:
- https://safe.ultrasurfing.com/*
- 1 high
- 1 medium
The file, code excerpt and explanation behind each finding are part of the full report. No conclusion has been withheld — only the evidence. The verdict above already reflects everything found here.
1 high-severity finding in this extension’s code
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
About this extension
Unblock The Internet With The Flip Of A Switch.
Read the publisher’s full description
Unblock The Internet. Fast And Secure Proxy And VPN Protection At The Flip Of A Switch. Join millions of people worldwide who are reclaiming their rights to a free, open, and unblocked internet with UltraSurf. Our VPN and proxy tool is trusted by users and experts alike - Harvard University's Berkman Center named UltraSurf "the best performing of all the tested tools" in their Circumvention Landscape Report. With UltraSurf, you can: Circumvent repressive censorship and access the content you want, wherever you are in the world. Use public wifi safely and securely, with all traffic encrypted and your IP and location masked. Enjoy complete online privacy and security with just one click. UltraSurf fights against billion-dollar censorship systems in countries like China, Iran, and Vietnam on a daily basis. Whether you're facing censorship from your government, corporation, or campus, we're here to help. Join the millions of users worldwide who trust UltraSurf for fast, secure, and reliable online access. For mobile devices, we offer the UltraSurf VPN app for both Android and iOS: Android: https://play.google.com/store/apps/details?id=us.ultrasurf.mobile.ultrasurf iOS: https://apps.apple.com/us/app/ultrasurf-vpn/id1563051300 If you have any questions or concerns, our support team is always available to assist you.
User reviews
Extension files
Browse and explore files within this extension package
Gain full insight into all external connections.
Upgrade for full visibility.
URLs
View the external URLs this extension communicates with to understand its network activity and data interactions.
1 high-severity finding in this extension’s code
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
Code Diff
Compare extension code between any two versions.
0 changed files detected
No comparable text files found between these versions.
Gain full insight into all external connections.
Upgrade for full visibility.
Related extensions
Popular in Privacy & Security
- McAfee® WebAdvisor162,000,000 users
- uBlock Origin Lite21,000,000 users
- Imprivata Enterprise Access Management20,000,000 users
- Kaspersky Protection19,000,000 users
- VPN for Chrome: NordVPN proxy protection15,000,000 users