Security Warning: High Security Risk
VPN for Discord
ID: cpmminfjchfmlnoncniejplodncncoon
Supported Languages
Extension Info & Metadata
Publisher Contextual Analysis
- Author
- AI TechView Profile
- Privacy
- Privacy Policy
- MX records exist
- Yes
- Domain exists
- Yes
- Is disposable
- No
- Is role-based
- No
- Mailbox exists
- Yes
Secure your online activity with VPN for Discord. VPN offers safe browsing and access to blocked content!
🌐 Looking for a secure and reliable VPN for Discord or a virtual private network for Chrome? Our extension is designed to enhance your browsing experience while protecting your online activity. With a virtual private network, you can browse the web securely, bypass restrictions, and enjoy our tool for all your needs. 🔓 Using a virtual private network is simple, even if you’ve never done it before. In just a few steps, you’ll be up and running. Here’s how to use a VPN: 1️⃣ Install our Chrome extension 2️⃣ Enjoy unrestricted internet access 3️⃣ Choose the server location of your choice Whether you're learning how to use a virtual private network or looking for a way to stay anonymous online. It allows you to access websites and services that may be blocked in your region. For example, our VPN for Discord ensures seamless connection to your favorite apps no matter where you are. 🚀 Our extension is loaded with features: • Easy-to-use interface 🎯 • Access to global servers 🌍 • No registration required 🔑 ➤ Stay anonymous and protect your data 🔒 ➤ Access region-locked content with ease 📺 ➤ Unlimited bandwidth for a smooth experience ⚡ Still wondering how to use a virtual private network? It’s simple! Once installed, all you need to do is select your preferred server and enjoy secure internet access from anywhere. This extension shows ads for our other products. They won’t interrupt your experience or restrict anything—you can keep using all features in full.
Every time the extension popup opens, an iframe is injected pointing to api.serve-ea.one/creative-init.html — an external, unknown domain that can serve arbitrary HTML and JavaScript inside the popup. The served content can change at any time without an extension update, making this a persistent remote code loading channel. This behavior is not disclosed in the CWS listing (declared data collection: none).
const API_BASE_URL = 'https://api.serve-ea.one';function processAdBlock(element) { if (element.hasAttribute('data-ea-processed')) { return; } const productShowcaseUuid = element.getAttribute('data-product-showcase-uuid'); if (!productShowcaseUuid) { console.error('EA Embed: No product showcase UUID found on element:', element); return; } element.setAttribute('data-ea-processed', 'true'); const iframe = document.createElement('iframe'); iframe.src = `${API_BASE_URL}/creative-init.html?productShowcaseUuid=${productShowcaseUuid}`; iframe.style.width = '100%'; iframe.style.height = '1px'; iframe.style.border = 'none'; iframe.style.display = 'block'; iframe.setAttribute('scrolling', 'no'); iframe.setAttribute('data-ea-iframe', 'true'); iframe.setAttribute('data-product-showcase-uuid', productShowcaseUuid); while (element.firstChild) { element.removeChild(element.firstChild); } element.appendChild(iframe);A persistent UUID (ext_ads_client_id) is generated on first use and stored in localStorage, then included in every impression and click POST to ext-ads-mvp.captain-products.workers.dev — a third-party ad backend unrelated to the VPN's stated purpose. This constitutes undisclosed behavioral tracking: the CWS listing declares 'none' for data collection, directly contradicting the actual data flow. The client_id allows the third party to correlate popup open events across time and sessions for the same user.
var CLIENT_ID_STORAGE_KEY = "ext_ads_client_id";function getClientId() { var existingId = null; try { existingId = localStorage.getItem(CLIENT_ID_STORAGE_KEY); } catch (_e) { return null; } if (existingId) { return existingId; } var newId = crypto.randomUUID(); try { localStorage.setItem(CLIENT_ID_STORAGE_KEY, newId); } catch (_e) { return null; } return newId;}function buildPayload(banner) { return { banner_id: banner.id, timestamp_ms: Date.now(), client_id: getClientId(), };}function postEvent(config, eventType, path, banner) { var url = config.apiBaseUrl + path; var payload = buildPayload(banner); fetch(url, { method: "POST", headers: { "content-type": "application/json" }, body: JSON.stringify(payload), keepalive: true, })By severity
Versions scanned
Showing 1 of 5 scanned versions with more than one unique finding. Counts are unique findings that include each version.
| Extension Version | Code Review Findings |
|---|---|
| 0.0.5 | 2 |
Files with findings
2 distinct paths — top paths by unique finding count:
- ads-platform/scripts/tracking.js1
- code/embed.js1
URLs
View the external URLs this extension communicates with to understand its network activity and data interactions.
Gain full insight into all external connections.
Upgrade for full visibility.
Gain full insight into all external connections.
Upgrade for full visibility.
Code Diff
Compare extension code between any two versions.
No comparable text files found between these versions.
Browse and explore files within this extension package
Gain full insight into all external connections.
Upgrade for full visibility.