Is UltraSurf safe?

Question

Is UltraSurf safe?

Accepted Answer

UltraSurf is high risk. When you enable the Safe Browsing feature in UltraSurf, the extension sends the full address of every page you visit, the page you came from, and a permanent device identifier to safe.ultrasurfing.com on every navigation. Our dynamic analysis confirmed this by planting a recognizable ID in the extension's storage and observing it appear in six outbound POST requests as you browsed Wikipedia, Amazon, Reddit, and ChatGPT. The persistent UUID means every navigation can be linked back to your device across sessions. On every page you navigate to while UltraSurf is on, the extension sends a SECOND copy of your browsing data — the URL, referrer, HTTP method, status code, tab ID, and your permanent UUID — to a private proxy endpoint at http://10.11.0.2:7000/_test_. Unlike the analytics endpoint, this one uses plain HTTP (not HTTPS), so the request itself travels in cleartext. The body is encrypted with the same hardcoded AES-GCM key ("8JCys9wTIqVO6gZu") used by the analytics endpoint, so anyone with the extension code can decrypt it. We confirmed this live: 14 POSTs to 10.11.0.2:7000 were captured during a 5-navigation test, and the decrypted bodies contained the exact canary URLs we had visited (CANARY_BIRD_12345, CANARY_TEST_BIRD_12345, PARROT_67890).

Is UltraSurf Security, Privacy & Freedom VPN safe?

Findings