Am I Being Pwned? logoAm I Being Pwned?
Book a demo
HomeStar VPN - Fast & Secure Proxy
Findings · 3
MEDIUM FINDINGS · 3
  1. 01VPN packet-tunnel binary statically links Firebase Crashlytics, Firebase Installations, and Firebase Analytics (APMMeasurement), sending crash reports and a persistent Firebase Installation ID to Google-controlled endpoints — undisclosed third-party telemetry from a service marketed as a privacy VPN.
  2. 02Packet-tunnel network extension routes all of the device's IP traffic through Star VPN's OpenVPN/tun2socks server infrastructure (vendor 'peach', team ID 73RE8E3DJH).
  3. 03VPN packet-tunnel binary integrates Apple Search Ads attribution (AAAttribution / api-adservices.apple.com) and references googleadservices.com/pagead/conversion deeplink reporting with the user's IDFA, indicating install-attribution / ad-conversion telemetry from inside the network extension.
OTHER EXTENSIONS

Is Star VPN - Fast & Secure Proxy safe?

Medium risk

No summary available.

Senight LLCv2.17.0Chrome Web Store
45Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Findings

Updated 30 May 2026com.peach.macos.network-extension

Am I Being Pwned?

Protecting organizations from malicious browser extensions.

© 2026 Bay Area Labs Inc. All rights reserved.

BlogHow it worksSecurityFor VendorsFAQAPI DocsPrivacy PolicyTerms of ServiceContact