Is Поток safe?

Question

Is Поток safe?

Accepted Answer

Поток is high risk. When you click the connect button, the extension fetches your public IP address from api.ipify.org and pairs it with a persistent device identifier stored on your machine, then sends both to a remote server at a domain resolved from a Google Cloud Storage config file. We observed two POST requests to ptkdfjnflmpalkfpkehjgopmjldhjhgb.click/api/v1/get-proxy each carrying your device ID and real IP address in plaintext JSON. On every browser startup, the extension fetches a JSON configuration file from Google Cloud Storage at storage.googleapis.com/potok/potok.json. The apiBaseUrl field in that file determines where your device ID and public IP are sent when you connect. Our dynamic analysis captured four GET requests to this config URL and confirmed the returned domain (ptkdfjnflmpalkfpkehjgopmjldhjhgb.click) became the recipient of all subsequent device data. The config can be updated at any time by the server operator, redirecting your data to a different destination without any extension update or user notification.

Is Поток – ускоритель YouTube safe?

Findings