Is 穿梭 Transocks safe?

Question

Accepted Answer

穿梭 Transocks is high risk. When Transocks loads, it silently renders an invisible canvas image and SHA-256 hashes the result to produce a device fingerprint. This 64-character hex string is stored as 'mac' and included in every API request the extension sends to webapi.fobwifi.com — across all sessions, without a consent prompt. Because the value is derived from your GPU and font rendering stack rather than a random number, it is stable across reinstalls and browser profile resets, giving the server a durable identifier tied to your hardware. Our dynamic analysis captured 9 POST requests on startup, each carrying the same mac value: 84ccbd751f5160b9915d2f8683eea69ceef4b4a6900a260354fee430b056c415. The extension's popup menu includes a menu item that offers three days of free VIP service in exchange for leaving a review on the Chrome Web Store. In the Chinese locale, the call to action is '给个好评' ('give a good review'), making the solicitation of a positive review explicit. This is inconsistent with Chrome Web Store policy, which prohibits offering incentives for reviews.

Is 穿梭Transocks回国加速器 - 海外华人回国追剧听歌 safe?

Findings