Is VPNLY safe?

Question

Is VPNLY safe?

Accepted Answer

VPNLY is medium risk. When the VPN proxy connects, the extension creates an offscreen worker and gives it an HTTP URL on api.telegra.ph with a random suffix. The worker code fetches whatever URL it receives, and dynamic analysis observed the extension sending that Telegraph URL to the offscreen helper after a connection attempt; no request body or response was recorded. When you open the VPNLY extension popup, it automatically sends your real IP address to gapi.268222219.xyz — a domain not identified in the Chrome Web Store listing or publicly linked to vpnly.com. Dynamic analysis captured a GET request to this endpoint returning your IP address, city, country code, latitude, and longitude before any VPN connection is established. The extension then stores this data in chrome.storage under the keys LOCATION_REAL and LOCATION_CURRENT, where the popup reads it to display your current location indicator.

Is Free VPN & Proxy For Chrome - VPNLY safe?

Findings