Is Urban Shield safe?

Low risk

Urban Shield lets any HTTP or HTTPS page persistently mute its safe-check warnings for that tab's domain.

Urban Shield injects a page-visible message bridge into HTTP and HTTPS pages, and the background script forwards requested events without checking the page origin. A page can use that bridge to mute safe-check notifications for the current tab and persist the muted state for the domain; the same bridge can also navigate the current tab to a blank safe page.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

Urban VPNv5.6.0Firefox Add-ons
21Risk
Who publishes it

Urban VPN - no other listings under this identity, 6 shared hostnames

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
Urban VPN

Shared hosts - 6 hostnames

Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.

stats.urban-vpn.com
Also called by 2 other listings, including Urban VPN
analytics-toolbar.urban-vpn.com
Also called by 4 other listings, including Urban VPN, Urban Browser Guard
anti-phishing-protection-toolbar.urban-vpn.com
Also called by 4 other listings, including Urban VPN, Urban AdBlocker
config-toolbar.urban-vpn.com
Also called by 6 other listings, including Urban VPN, Urban AdBlocker, Urban Browser Guard
authentication.urban-vpn.com
Also called by 8 other listings, including Urban AdBlocker, Urban Browser Guard, Urban Safe Browsing
urban-vpn.com
Also called by 9 other listings

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 5.6.0. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on every site you visit

    <all_urls>

  • Read and change your data on sessions.bugsnag.com

    https://sessions.bugsnag.com/*

  • Read and change your data on notify.bugsnag.com

    https://notify.bugsnag.com/*

  • Read and change your data on urban-vpn.com

    https://*.urban-vpn.com/*

  • Read and change your data on google-analytics.com

    https://google-analytics.com/*

  • Read and change your data on www.google-analytics.com

    https://www.google-analytics.com/*

  • Read and change your data on ssl.google-analytics.com

    https://ssl.google-analytics.com/*

  • See the address and title of every tab you have open

    tabs

  • See every page you navigate to, as you navigate to it

    webNavigation

  • Watch every request your browser makes

    webRequest

  • Watch, block and rewrite every request your browser makes

    webRequestBlocking

  • Route all of your browsing through a server of its choosing

    proxy

  • See, disable and uninstall your other extensions, including your security ones

    management

  • Schedule its own background tasks

    alarms

  • Store data in your browser

    storage

  • Clear your browsing history, cache and cookies

    browsingData

Updated 2 November 2026amo-2603803