Is VPN Master safe?

Medium risk

VPN Master is medium risk. Clicking certain links checks whether the destination domain is on a remote ad-domain list. On a match, VPN Master sends the clicked URL to data.trendcampaign.com and redirects through an affiliate result after a 3-second interstitial.

50Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Findings

Matching link clicks redirect through TrendCampaign affiliate service.

Clicking certain links checks whether the destination domain is on a remote ad-domain list.

On a match, VPN Master sends the clicked URL to data.trendcampaign.com and redirects through an affiliate result after a 3-second interstitial.

Severity
Medium unwanted
Type
Unexpected
CWE
CWE-359
Source
Dynamic sandbox
What actually happens
You did this

The user clicks a link on a web page.

The extension did this

For domains on a remote advertising list, the extension sends the clicked URL to data.trendcampaign.com and redirects the tab through an affiliate result.

Captured request
GETdata.trendcampaign.com
Fields in the request
  • Clicked page URL
    https://example.com/product (illustrative)

    The affiliate service receives the address of the link you clicked, which can reveal the destination site or page you intended to open.

What it can do

Permissions this extension asks for, as declared in version 2.3. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on every site you visit

    *://*/*

  • Route all of your browsing through a server of its choosing

    proxy

  • Watch every request your browser makes

    webRequest

  • Store data in your browser

    storage

  • See the address and title of every tab you have open

    tabs

  • Schedule its own background tasks

    alarms

webRequestAuthProviderdeclarativeNetRequestWithHostAccess
Updated 21 September 2026nmbgmmidnmpoebaopgafhmomioefilof