Is Turbo Stream safe?
Turbo Stream routes most browser traffic through 72.56.50.29:43799 when its Server 4 proxy option is enabled.
Turbo Stream presents itself as a YouTube acceleration tool, but selecting Server 4 installs a PAC proxy that sends most non-excluded browser destinations through 72.56.50.29:43799. That proxy receives the routed request traffic, including destination URL data, IP-level connection details, and HTTP headers handled by the proxy.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Findings
Turbo Stream routes non-excluded browser traffic through Server 4 proxy
Choosing Server 4 in Turbo Stream applies a browser-wide proxy rather than limiting routing to YouTube or video pages.
Non-excluded requests can go through 72.56.50.29:43799, exposing URLs, connection metadata, and headers to that proxy.
- Severity
- Medium unwanted
- Type
- Unexpected
- CWE
- CWE-359
- Source
- Dynamic sandbox
You choose Server 4 in the extension popup.
The extension applies a PAC-script proxy configuration that routes non-excluded browser destinations through Server 4.
- Requested URLhttps://www.example.com/page (illustrative)
Shows which non-excluded site or page the browser is requesting through the proxy route.
- IP connection metadata203.0.113.25 (illustrative)
Identifies the network endpoint involved in the proxied browser connection.
- Request headersUser-Agent: Chrome (illustrative)
Can include browser and request context sent as part of the proxied connection.
Where it sends data
Destinations our analysis observed Turbo Stream contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- 72.56.50.29:43799
Turbo Stream sends data to 72.56.50.29:43799. No other extension we have analysed sends data here.