Version 2.2.2 View in Chrome Web Store
The extension has a concerning trust profile with only 40,000 users and a poor 2.9-star rating from 63 reviews, indicating user dissatisfaction. While INVIZBOX LIMITED appears to be a legitimate VPN company, the low rating suggests potential issues with functionality or user experience. The relatively small user base for a VPN service raises questions about its reliability and market acceptance.
The extension exhibits multiple red flags that justify the critical risk rating. The combination of privacy, proxy, and webRequest permissions creates a powerful toolkit that could intercept, modify, and redirect all web traffic. The broad host permissions and content script injection capabilities mean this extension can access and potentially manipulate data on every website you visit. For a VPN extension, while some of these permissions are functionally necessary, the extensive scope creates significant attack surface if the extension is compromised or malicious.
Given the critical risk level, avoid installing this extension on your primary browser profile. If you must use it, create a dedicated Chrome profile specifically for VPN usage and avoid accessing sensitive accounts or websites while it's active. Consider well-established VPN providers with better ratings and larger user bases. Monitor your network traffic and browser behavior closely if you choose to proceed. The poor user ratings suggest you may encounter functionality issues beyond security concerns.
| https://getbootstrap.com/ | https://github.com/twbs/bootstrap/blob/master/LICENSE | |
| http://www.w3.org/2000/svg | http://www.w3.org/1999/xlink | |
| http://www.bohemiancoding.com/sketch | http://schemas.android.com/apk/res/android | |
| https://groups.google.com/a/chromium.org/g/chromium-extensions/c/U_Fyn9Z_9OE/m/_MCeHzjTCAAJ | https://issues.chromium.org/issues/40880379 | |
| https://issues.chromium.org/issues/40275804 | https://www.vpncity.com/api/session/ipcheck | |
| https://proxy-logout.vpncity.com | https://go.vpncity.com/chrome-extension-feedback | |
| https://go.vpncity.com/chrome-extension-success-installation | https://blog.vpncity.com/vpncity-and-the-cyberhaven-security-incident-protecting-our-customers-and-moving-forward/ | |
| https://go.vpncity.com/firefox-extension-feedback | https://go.vpncity.com/firefox-extension-success | |
| http://proxy-logout.vpncity.com/ | https://proxy-logout.vpncity.com/ | |
| https://www.vpncity.com/checkout/order/ | https://github.com/twbs/bootstrap/graphs/contributors | |
| https://popper.js.org/ | https://www.vpncity.com/api/locations | |
| https://www.vpncity.com/api/account/checkupgrade | https://go.vpncity.com/chrome-extension-unlimited?userid= | |
| https://go.vpncity.com/firefox-extension-unlimited?userid= | https://www.vpncity.com/page/refer-friend/ | |
| https://www.vpncity.com/api/account/register | https://www.vpncity.com/api/account/login | |
| https://go.vpncity.com/chrome-extension-success-registration?userid= | https://go.vpncity.com/firefox-extension-success-registration?userid= | |
| https://clients2.google.com/service/update2/crx | https://www.vpncity.com/ | |
| https://www.vpncity.com/page/privacy-policy | http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd |
{ "name": "VPNCity - Fast & Unlimited VPN | Unblocker", "icons": { "128": "icon_128.png" }, "action": { "default_icon": "icon.png", "default_popup": "popup.html" }, "author": "Think Huge Ltd", "version": "2.2.2", "background": { "type": "module", "service_worker": "js/service_worker.js" }, "update_url": "https://clients2.google.com/service/update2/crx", "description": "VPNCity - Fast, Secure & Unlimited VPN | Unblock Sites", "permissions": [ "alarms", "offscreen", "privacy", "proxy", "storage", "webRequest", "webRequestAuthProvider" ], "content_scripts": [ { "js": [ "js/jquery-3.3.1.min.js", "js/warning.js" ], "matches": [ "<all_urls>" ] } ], "host_permissions": [ "https://www.vpncity.com/", "<all_urls>" ], "manifest_version": 3 }
ⓘ CRXaminer has partnered with our friends at Secure Annex to provide additional findings unique to their platform.
Secure Annex also analyzes extensions from other browsers, IDEs, and can continuously monitor.
This extension may not yet be analyzed by Secure Annex.