Is ProxyEmpire Proxy Manager safe?

Medium risk

ProxyEmpire is medium risk. Connecting or testing a proxy contacts third-party IP lookup services such as ipapi.co, exposing the proxy IP address and its approximate geolocation.

ProxyEmpirev1.1.0Chrome Web Store
50Risk
Who publishes it

"SWIFT SAAS" Ltd. - no other listings under this identity

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
ProxyEmpire
Declared legal entity
"SWIFT SAAS" Ltd.
Registered address
Samuil 20 street, Burgas 8000, BG
Registered contact
George Mitsov
Website
proxyempire.io/contact-us/

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Findings

Proxy connection sends proxy IP address to IP lookup services.

Connecting or testing a proxy contacts third-party IP lookup services such as ipapi.co, exposing the proxy IP address and its approximate geolocation.

Severity
Medium unwanted
Type
Unexpected
CWE
CWE-200
Source
Dynamic sandbox
What actually happens
You did this

The user connects or tests a proxy.

The extension did this

The extension contacts IP lookup services and stores the returned proxy IP and geolocation information in connection health state.

Captured request
GETipapi.co/json/
Fields in the request
  • Proxy IP address
    203.0.113.42 (illustrative)

    Identifies the network address of the active proxy to the IP lookup service.

Observation

Dynamic analysis confirmed that the connect flow starts health monitoring and requests IP lookup data from multiple services. The DB evidence indicates the exposed address is the proxy server IP, not the user's original IP.

What it can do

Permissions this extension asks for, as declared in version 1.0.2. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to. The current listed version is 1.1.0, which we have not unpacked yet.

  • Read and change your data on every site you visit

    <all_urls>

  • Route all of your browsing through a server of its choosing

    proxy

  • Watch every request your browser makes

    webRequest

  • Block and redirect the requests your browser makes

    declarativeNetRequest

  • Store data in your browser

    storage

  • Clear your browsing history, cache and cookies

    browsingData

  • See the address and title of every tab you have open

    tabs

  • Run its own code inside the pages you visit

    scripting

webRequestAuthProvider
Updated 30 September 2026pljikjgdcelenhecaainhheabilopmcc