Is VPN Satoshi — Chrome VPN extension safe?
VPN Satoshi collects a browser fingerprint on startup and transmits it to its backend, while storing credentials encrypted with a hardcoded key.
On startup, the extension builds a fingerprint from canvas, WebGL, audio context, and hardware properties and sends it to api.aamenista.pro, attaching the returned signature to every subsequent API request. Access tokens and proxy credentials stored in local extension storage are encrypted with a static AES-GCM passphrase that is fully readable from the distributed bundle. The extension also fetches its live backend API endpoint list from Yandex Cloud S3, decrypted with a hardcoded AES-CBC key and IV ('1234567890123456'), allowing the active server pool to be redirected remotely.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
Who publishes itvpn-satoshi - no other listings under this identity
vpn-satoshi - no other listings under this identity
What this publisher told the store about itself, and the other listings that told it the same thing.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Where it sends data
Destinations our analysis observed VPN Satoshi — Chrome VPN extension contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- storage.yandexcloud.net
VPN Satoshi — Chrome VPN extension sends data to storage.yandexcloud.net. One other extension we have analyzed sends data here.
- api.aamenista.pro
VPN Satoshi — Chrome VPN extension sends data to api.aamenista.pro. No other extension we have analyzed sends data here.