Is dupay proxy safe?
Dupay Proxy sends the user's activation token over plain HTTP and receives proxy server credentials back in cleartext.
When a user enters an activation token on the extension's options page, Dupay Proxy sends it in a plain HTTP POST to a hardcoded private-IP address rather than using an encrypted connection. The response, containing the proxy server address and a username/password for it, comes back unencrypted and is applied directly to the browser's proxy configuration, routing all of the user's traffic through it.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Where it sends data
Destinations our analysis observed dupay proxy contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- 192.168.1.8:10008
dupay proxy sends data to 192.168.1.8:10008. No other extension we have analyzed sends data here.