Chrome Web StoreCaution required
Suspicious in code review (v0.0.5)
Our reviewer found behaviour consistent with malware in version 0.0.5, but not enough to confirm it. Treat this extension as untrusted until it has been re-reviewed.
45 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
What our analysis found
VPN for Discord, used by 10,000 people, is rated caution by Extension Auditor. Our code review reported 2 findings (1 high, 1 medium), led by remote code loading. Its permissions mean it can read and change data on all websites.
Key findings
- High
Remote Code Loading
Every time the extension popup opens, an iframe is injected pointing to — an external, unknown domain that can serve arbitrary HTML and JavaScript inside the popup. The served content can change at any time without an extension update, making this a persistent remote code loading channel. This behavior is not disclosed in the CWS listing (declared data collection: none).
- Medium
Tracking
A persistent UUID (ext_ads_client_id) is generated on first use and stored in localStorage, then included in every impression and click POST to [domain withheld] — a third-party ad backend unrelated to the VPN's stated purpose. This constitutes undisclosed behavioral tracking: the CWS listing declares 'none' for data collection, directly contradicting the actual data flow. The client_id allows the third party to correlate popup open events across time and sessions for the same user.
Analyst notes
The core functionality is legitimate — the extension correctly fetches server lists from [domain withheld] and routes traffic via chrome.proxy.settings.set(). However, two undisclosed behaviors raise concrete concern: (1) loads an iframe from api.serve-ea.one inside the popup without any CWS disclosure, enabling arbitrary remote content delivery on every popup open; (2) persists a UUID client_id in localStorage and POSTs it with every banner to [domain withheld], a third-party ad backend not mentioned in the CWS data-collection declaration of 'none'. The permhash cluster shows 30% malicious peers and the publisher has a 50% malicious extension history, both corroborating suspicion, but the ML score of 0.08 is low and the proxy logic itself is straightforwardly functional.
VPN for Discord Chrome extension security report
ID: cpmminfjchfmlnoncniejplodncncoon
Supported Languages
Extension Info & Metadata
Publisher Contextual Analysis
- Author
- AI Tech
- Privacy
- Privacy Policy
- MX records exist
- Yes
- Domain exists
- Yes
- Is disposable
- No
- Is role-based
- No
- Mailbox exists
- Yes
- Website
- Visit
Screenshots & videos
Install growth
45 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
About this extension
Secure your online activity with VPN for Discord. VPN offers safe browsing and access to blocked content!
Read the publisher’s full description
🌐 Looking for a secure and reliable VPN for Discord or a virtual private network for Chrome? Our extension is designed to enhance your browsing experience while protecting your online activity. With a virtual private network, you can browse the web securely, bypass restrictions, and enjoy our tool for all your needs. 🔓 Using a virtual private network is simple, even if you’ve never done it before. In just a few steps, you’ll be up and running. Here’s how to use a VPN: 1️⃣ Install our Chrome extension 2️⃣ Enjoy unrestricted internet access 3️⃣ Choose the server location of your choice Whether you're learning how to use a virtual private network or looking for a way to stay anonymous online. It allows you to access websites and services that may be blocked in your region. For example, our VPN for Discord ensures seamless connection to your favorite apps no matter where you are. 🚀 Our extension is loaded with features: • Easy-to-use interface 🎯 • Access to global servers 🌍 • No registration required 🔑 ➤ Stay anonymous and protect your data 🔒 ➤ Access region-locked content with ease 📺 ➤ Unlimited bandwidth for a smooth experience ⚡ Still wondering how to use a virtual private network? It’s simple! Once installed, all you need to do is select your preferred server and enjoy secure internet access from anywhere. This extension shows ads for our other products. They won’t interrupt your experience or restrict anything—you can keep using all features in full.
User reviews
Extension files
Browse and explore files within this extension package
Gain full insight into all external connections.
Upgrade for full visibility.
URLs
View the external URLs this extension communicates with to understand its network activity and data interactions.
45 indicators in this extension
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
Code Diff
Compare extension code between any two versions.
0 changed files detected
No comparable text files found between these versions.
Gain full insight into all external connections.
Upgrade for full visibility.
Related extensions
More from AI Tech
- AI GPT20,000 users
- Deal Finder301 users
Popular in Tools
- Montara Chrome Extension639,000,000 users
- 迅雷下载支持87,000,000 users
- Passlit Openbook10,000,000 users
- Zotero Connector9,000,000 users
- Browsec VPN - Free VPN for Chrome8,000,000 users