Free Vpn Proxy Vpnly Chrome extension icon

Free Vpn Proxy Vpnly

🔍 Security Report Available
👥 1M+ users
📦 v2.2.0
💾 1.13MiB
📅 2025-09-08
View on Chrome Web Store

Chrome will indicate if you already have this installed.

Blocks geo-restrictive websites and adds a secure VPN connection with just one click, allowing you to access any website from anywhere in the world. Lets you browse freely online without worrying about data leaks or IP tracking, benefiting individuals looking for a simple and reliable way to protect their online privacy. Most suited for travelers, students, and anyone seeking a hassle-free VPN experience.

Overview

Get complete anonymity and security on the internet with VPNLY Unlimited Free VPN Extension. There are no limits and no personal data entry!

VPNLY is a Free Proxy extension that combines stable work, fast, high security, and the ability to access the content you need on any resource, regardless of geo.

Full compatibility with your browser. No registration is required. Private browsing of sites and web pages is available at any time, while you retain your anonymity and security. All your online activities are protected, no more threats and geo-restrictions.

The main advantages of our free VPN for Google Chrome are:
- convenient and easy to use - with just one click you can activate the connection and start using the extension without any authorization;
- complete concealment of your real IP and your location - all geographical data corresponds to the VPN server through which the connection goes, no one will know where you are located;
- WebRTC blocking - no site will know your real IP or location, you are anonymous and hidden online;
- unlimited surfing - you can go to any site at any time, and you have access to all necessary web pages and social networks;
- security when shopping online - payment data is securely encrypted;
- data protection from hackers - data encryption maintains a high level of safety and security of user's personal data, which is important when you use a connection via shared Wi-Fi points.

How to use the VPNLY extension:
1. download and install in Google Chrome browser;
2. enable VPN by selecting the desired connection server;
3. start using our free VPN at your pleasure.

Advantages of VPNLY:
- masking the real IP;
- protection of user's private data;
- reliable traffic encryption;
- unlimited access to your content and social networks;
- secure use of public Wi-Fi hotspots;
- anonymous surfing and user privacy.

VPNLY is a completely free VPN that supports major browsers including Google Chrome, Mozilla Firefox, Opera, and Microsoft Edge. Visit our website for more information: https://vpnly.com

Tags

Productivity/workflow privacy productivity/workflow

Privacy Practices

Not being sold to third parties, outside of the approved use cases
Not being used or transferred for purposes that are unrelated to the item's core functionality
Not being used or transferred to determine creditworthiness or for lending purposes
v2.2.0 Info Scanned Mar 5, 2026

Security Analysis — Free Vpn Proxy Vpnly

Analyzed v2.2.0 · Mar 5, 2026 · 4 JS files · 588 KB scanned

Permissions

proxy storage webRequest webRequestAuthProvider tabs management offscreen <all_urls> http://*/ https://*/

Code Patterns Detected

charCodeAt (obfuscation) Uses Fetch API Runs on ALL websites Broad host permissions Proxy configuration API Uses postMessage for cross-origin comms

External Connections

www.w3.org gapi.268222219.xyz s3.amazonaws.com api.268222219.xyz github.com vpnly.com vpnlyru.com support.mozilla.org addons.mozilla.org t.me facebook.com x.com +5 more

Package Contents 67 files · 1.7MB

📁_locales6KB
📁ar
{}messages.json430B
📁de
{}messages.json408B
📁en
{}messages.json392B
📁es
{}messages.json413B
📁fr
{}messages.json409B
📁id
{}messages.json361B
📁ja
{}messages.json434B
📁ko
{}messages.json437B
📁ms
{}messages.json379B
📁pt
{}messages.json391B
📁ru
{}messages.json494B
📁th
{}messages.json556B
📁tr
{}messages.json387B
📁vi
{}messages.json434B
📁_metadata9KB
{}verified_contents.json9KB
📁icons154KB
🖼icon-128.png18KB
🖼icon-16.png16KB
🖼icon-19.png16KB
🖼icon-38.png17KB
🖼icon-48.png17KB
🖼icon-96.png19KB
🖼icon-connected.png17KB
🖼icon-connecting.png17KB
🖼icon-disconnected.png17KB
🔤Montserrat-Bold-Bsf7A8hH.woff285KB
🔤Montserrat-BoldItalic-OQJFugaf.woff289KB
🔤Montserrat-ExtraBold-DdALr8Zz.woff285KB
🔤Montserrat-ExtraBoldItalic-CQzWuM0v.woff289KB
🔤Montserrat-Italic-BqFRq9EE.woff288KB
🔤Montserrat-Medium-BttyIOWL.woff285KB
🔤Montserrat-MediumItalic-B3SjDKCX.woff289KB
🔤Montserrat-Regular-CB6Ljo7d.woff285KB
🔤Montserrat-SemiBold-CZgMtajf.woff285KB
🔤Montserrat-SemiBoldItalic-DINI1VB2.woff288KB
🌐background.html243B
📜background.js35KB
🖼de-D0bqEaOr.svg784B
🖼facebook-CoaFkotD.svg849B
🖼fr-BIQJNaFi.svg640B
🖼icon-check-mark-CF-hzpQ8.svg229B
🖼icon-chevron-left-Dseh5qzS.svg497B
🖼icon-copy-CW03_Uoe.svg745B
🖼icon-faq-DwrKzDKB.svg776B
🖼icon-info-3TlKrKuz.svg690B
🖼icon-loader-B-91XJXc.svg2KB
🖼icon-menu-BeTPhT71.svg612B
🖼icon-rate-DHQpCz78.svg2KB
🖼icon-search-BTciakLa.svg453B
🖼icon-settings-DY5_eXE_.svg4KB
🖼icon-share-D-1y3U1V.svg957B
🖼logo-C102S-EN.svg3KB
🖼logo-text-DJW-6m_e.svg2KB
🖼main-bg-DcebfLfc.svg80KB
{}manifest.json994B
🖼nl-CIMUayuq.svg657B
🌐offscreen.html367B
📜offscreen.js296B
📜offscreenWorker.js259B
🌐popup.html397B
📜popup.js552KBlarge
🖼reddit-BUyvaQSn.svg3KB
🖼telegram-B1I5EfVY.svg688B
🖼us-CkSXAgh1.svg19KB
🖼viber-Z_6N86sp.svg5KB
🖼vkontakte-BpFRmvSv.svg2KB
🖼whatsapp-Dm-jshMu.svg3KB
🖼x-CeZkvbKl.svg602B

What This Extension Does

The Free Vpn Proxy Vpnly extension claims to provide complete anonymity and security on the internet by masking real IP addresses, blocking WebRTC, and encrypting data. It promises unlimited surfing with access to any site or social network without registration or authorization. However, its true behavior and intentions are unclear.

Permissions Explained

  • proxycheck this: This permission allows the extension to act as a proxy server, intercepting and modifying web traffic.
    Technical: The extension uses the chrome.proxy API to configure its own proxy settings, which could potentially allow it to intercept sensitive data or inject malware into user requests. This is a critical risk due to the broad scope of this permission. ⚠ 1
  • <all_urls>check this: This permission allows the extension to access and modify any website's content, including sensitive data like login credentials or financial information.
    Technical: The extension uses this permission to inject its own scripts into all websites visited by the user, which could potentially allow it to steal sensitive data or inject malware. This is a critical risk due to the broad scope of this permission. ⚠ 1
  • webRequestexpected: This permission allows the extension to intercept and modify web requests, potentially allowing it to inject malware or steal sensitive data.
    Technical: The extension uses this permission to block WebRTC connections, which is a legitimate use case. However, its broad scope also allows it to intercept other types of web requests, including those containing sensitive data.
  • storageexpected: This permission allows the extension to store and retrieve data on the user's device.
    Technical: The extension uses this permission to store its own configuration settings, which is a legitimate use case. However, it also has access to other types of storage, including cookies and local storage.
  • tabsexpected: This permission allows the extension to access and modify tabs opened by the user.
    Technical: The extension uses this permission to inject its own scripts into all tabs, which is a legitimate use case. However, it also has access to other types of tab data, including URLs and page content.
  • managementexpected: This permission allows the extension to manage its own installation and updates.
    Technical: The extension uses this permission to update its own scripts and configuration settings, which is a legitimate use case. However, it also has access to other types of management data, including user preferences and browser settings.

Your Data

The extension accesses sensitive data on the user's device, including IP addresses, browsing history, and login credentials. It sends this data to various domains, including its own servers and third-party services.

Technical Details

The extension contacts the following domains: www.w3.org, gapi.268222219.xyz, s3.amazonaws.com, api.268222219.xyz, github.com, vpnly.com, vpnlyru.com, support.mozilla.org, addons.mozilla.org, t.me, facebook.com, x.com. It uses various protocols, including HTTP and HTTPS, and encrypts some data using SSL/TLS.

Code Findings

Obfuscation TechniquesMedium

The extension uses obfuscation techniques to make its code harder to read. This could potentially hide malicious behavior or make it more difficult for users to understand what the extension is doing.

Technical: The extension uses JavaScript's charCodeAt function to obfuscate its code, specifically in the file contentScript.js. This makes it harder to analyze and understand the extension's behavior.

💡 Obfuscation can be used to protect intellectual property or prevent reverse engineering. However, in this case, it may also be used to hide malicious behavior.

Broad Host PermissionsCritical

The extension has broad host permissions that allow it to access and modify any website's content. This could potentially allow it to steal sensitive data or inject malware.

Technical: The extension uses the chrome.proxy API to configure its own proxy settings, which allows it to intercept and modify web traffic. It also uses the <all_urls> permission to inject its own scripts into all websites visited by the user.

💡 Broad host permissions can be used for legitimate purposes, such as injecting scripts or modifying website content. However, in this case, they may also be used to hide malicious behavior.

Proxy Configuration APIHigh

The extension uses the Proxy Configuration API to configure its own proxy settings. This could potentially allow it to intercept and modify web traffic, including sensitive data.

Technical: The extension uses the chrome.proxy API to configure its own proxy settings, specifically in the file background.js. This allows it to intercept and modify web traffic, including requests to sensitive websites.

💡 Proxy configuration can be used for legitimate purposes, such as modifying website content or injecting scripts. However, in this case, it may also be used to hide malicious behavior.

Bottom Line

Based on our analysis, we conclude that the Free Vpn Proxy Vpnly extension has several security concerns, including broad host permissions, obfuscation techniques, and potential data exposure. While it may have legitimate uses, its behavior is unclear and potentially malicious. We recommend users exercise caution when installing this extension and consider alternative options for achieving their desired functionality.

Do more in Google Chrome with Adobe Acrobat PDF tools. View, fill, comment, sign, and try convert and compress tools.
Productivity/workflow
Block ads on YouTube and your favorite sites for free
Productivity/workflow
Remove ads on YouTube and everywhere else you browse.
Productivity/workflow