Is FastProxy - Россия safe?

Medium risk

FastProxy - Россия transmits hashed browsing history to its servers and applies remotely-fetched proxy and redirect rules to user navigation.

On every tab navigation, the extension encodes visited hostnames with Base64 and appends them to a history list stored in browser storage. This list is sent to the operator's server on each config poll as query parameters. The server response contains a Proxy Auto-Config (PAC) file URL and Base64-encoded redirect rules that are applied to browser traffic without any integrity verification, allowing the operator to route or rewrite user navigation to arbitrary destinations.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

FastProxyv2.1.1Firefox Add-ons
46Risk
Who publishes it

FastProxy - no other listings under this identity, 1 shared hostname

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
FastProxy

Shared hosts - 1 hostname

Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.

fastproxy.online
Also called by 1 other listing: fastproxy-украина

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 2.1.1. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on every site you visit

    <all_urls>

  • Route all of your browsing through a server of its choosing

    proxy

  • See the address and title of every tab you have open

    tabs

  • Watch every request your browser makes

    webRequest

  • Store data in your browser

    storage

  • Store an unlimited amount of data in your browser

    unlimitedStorage

  • Run its own code inside the pages you visit

    scripting

Where it sends data

Destinations our analysis observed fastproxy-россия contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • php-version.fastproxy.xyz

    fastproxy-россия sends data to php-version.fastproxy.xyz. No other extension we have analyzed sends data here.

Updated 2 November 2026amo-881885