Am I Being Pwned? logoAm I Being Pwned?
Book a demo
HomeTouch VPN - Unlimited Proxy
Findings · 3
+1 more finding locked
HIGH FINDINGS · 3
  1. 01Touch VPN ships two NEPacketTunnelProvider appex (Hydra and WireGuard) that route 100% of system traffic through Pango/Anchorfree-controlled VPN servers; vendor terminates TLS at edge and operates URL-categorization (Fireshield) inside the tunnel.
  2. 02Both packet-tunnel appex link Firebase Crashlytics, Firebase Sessions, Firebase Installations and Firebase Remote Config; bundled GoogleService-Info.plist exposes Firebase project touchvpn-ios with API key AIzaSyAEKjRog1wYTD4DDlHiIu0R_p85V5xCrjY and DATABASE_URL https://touchvpn-ios.firebaseio.com.
  3. 03Both packet-tunnel appex embed Pango's UCRTracker, which POSTs VPN connection telemetry (connection_started, connection_start_detailed, connection_end_detailed events with carrier_id, country, server, reason fields) to https://event.pango-cloud.com/api/report/.
+1 more finding locked
OTHER EXTENSIONS

Is Touch VPN - Unlimited Proxy safe?

High risk

No summary available.

TouchVPNv2.8.0Chrome Web Store
75Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Findings

+1 more finding not shown

Book a call to see all findingsScan your browser
Updated 30 May 2026com.northghost.mac.touchvpn.neprovider

Am I Being Pwned?

Protecting organizations from malicious browser extensions.

© 2026 Bay Area Labs Inc. All rights reserved.

BlogHow it worksSecurityFor VendorsFAQAPI DocsPrivacy PolicyTerms of ServiceContact