Is SetupVPN Lifetime Free VPN safe?

Low risk

SetupVPN sends device fingerprint and account UID to anonymous proxy servers and fetches its server list from unsigned CDN mirrors.

When routing traffic, SetupVPN sends the browser version, operating system, platform, and a unique account UID to a rotating pool of servers hosted on DigitalOcean, AWS S3, Cloudflare R2, Vultr, and Linode under cryptically-named domains. The server list itself is pulled from multiple CDN mirrors without cryptographic verification, meaning a compromised mirror could silently redirect all proxied traffic. Core authentication and proxy logic runs inside a 1.2 MB Go-compiled WebAssembly binary that cannot be statically audited.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

SetupVPNv3.12.25Firefox Add-ons
21Risk
Who publishes it

SetupVPN - no other listings under this identity

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
SetupVPN

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 3.12.25. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on every site you visit

    <all_urls>

  • Store data in your browser

    storage

  • Route all of your browsing through a server of its choosing

    proxy

  • Show you desktop notifications

    notifications

  • Watch every request your browser makes

    webRequest

  • Watch, block and rewrite every request your browser makes

    webRequestBlocking

  • See the address and title of every tab you have open

    tabs

  • See, disable and uninstall your other extensions, including your security ones

    management

Where it sends data

Destinations our analysis observed SetupVPN Lifetime Free VPN contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • ams1.vultrobjects.com

    SetupVPN Lifetime Free VPN sends data to ams1.vultrobjects.com. No other extension we have analyzed sends data here.

  • api.keepthisdomain.com

    SetupVPN Lifetime Free VPN sends data to api.keepthisdomain.com. No other extension we have analyzed sends data here.

  • datacntech.com

    SetupVPN Lifetime Free VPN sends data to datacntech.com. No other extension we have analyzed sends data here.

  • ehih.defined.pics

    SetupVPN Lifetime Free VPN sends data to ehih.defined.pics. No other extension we have analyzed sends data here.

  • icax.defined.pics

    SetupVPN Lifetime Free VPN sends data to icax.defined.pics. No other extension we have analyzed sends data here.

  • lllm.mouse.pics

    SetupVPN Lifetime Free VPN sends data to lllm.mouse.pics. No other extension we have analyzed sends data here.

  • mirror4.es-mad-1.linodeobjects.com

    SetupVPN Lifetime Free VPN sends data to mirror4.es-mad-1.linodeobjects.com. No other extension we have analyzed sends data here.

  • pub-8029ed10cf4e4db0b3757e6b82ef7a40.r2.dev

    SetupVPN Lifetime Free VPN sends data to pub-8029ed10cf4e4db0b3757e6b82ef7a40.r2.dev. No other extension we have analyzed sends data here.

  • sxkk.mouse.pics

    SetupVPN Lifetime Free VPN sends data to sxkk.mouse.pics. No other extension we have analyzed sends data here.

  • tierbase3.fra1.cdn.digitaloceanspaces.com

    SetupVPN Lifetime Free VPN sends data to tierbase3.fra1.cdn.digitaloceanspaces.com. No other extension we have analyzed sends data here.

  • tierbase4.s3.amazonaws.com

    SetupVPN Lifetime Free VPN sends data to tierbase4.s3.amazonaws.com. No other extension we have analyzed sends data here.

Updated 2 November 2026amo-698512