Is Urban VPN Proxy safe to use?

Urban VPN Proxy has a security risk score of 64.99/100 (MEDIUM risk). Our security analysis detected 846 findings. Review the detailed security assessment below to understand the specific risks before installation.

What are the security risks of Urban VPN Proxy?

Based on our automated security analysis, Urban VPN Proxy presents medium risk level. The extension is analyzed for malware patterns, secret exposure, network communications, permissions, and supply chain vulnerabilities.

How is the security score calculated?

Risky Plugins calculates security scores using weighted categories: severity of findings (25 points max), malware detections (35 points), secret exposure (28 points), network communications (10 points), and obfuscation (10 points). Scores range from 0-100, with higher scores indicating greater risk.

What does CRITICAL, HIGH, MEDIUM, LOW, MINIMAL risk mean?

CRITICAL (80-100): Severe security issues like malware. HIGH (60-79): Significant vulnerabilities. MEDIUM (40-59): Moderate security concerns. LOW (20-39): Minor issues. MINIMAL (0-19): Very low risk. Always review findings before installing any extension.

Chrome Web Store Verified

Urban VPN Proxy

by [email protected] · 7.0M users · 4.7 rating

f0d5b01f-e051-5bb9-bc70-b579a0ad315d | v5.14.4

MEDIUM risk

No change since v5.14.3

Risk verdict

Review before use

Score-based assessment (medium risk, 65/100). Last analyst review covers version 5.11.11.

Analysis record

Analysed: 1 months ago
Version: v5.14.4
Artifact: SHA256 4D6…FB0
Source: Findings (non-IoC)

Evidence ledger

Ranked by severity · findings with a source location link to the code viewer

260 detail rows

Showing 25 of 43 · highest severity first

YARA Rule Matches

14 rules

Severity	Rule	Hits	Files	Metadata
LOW	`credential env files`	10	content/consent-reminder-notification/build.jscontent/content.jscontent/terminated-connection-notification/build.js +7 more	-
LOW	`postinstall persistence mechanism`	10	service-worker/index.jspopup/build.jspublic/fonts/Satoshi-Variable.ttf +7 more	-
LOW	`NoUseWeakRandom`	27	executors/305.jscontent/consent-reminder-notification/build.jscontent/location/location.js +24 more	-
LOW	`postinstall file download`	19	executors/306.jslibs/requests.jscontent/safe-price-check-notification/build.js +16 more	-
LOW	`UntrustedContentShouldNotBeIncluded`	1	ad-blocker/content.js	-
LOW	`LocalStorageShouldNotBeUsed`	1	popup/build.js	-
LOW	`DebuggerStatementsShouldNotBeUsed`	6	content/consent-reminder-notification/build.jscontent/terminated-connection-notification/build.jscontent/anti-male-ware-notification/build.js +3 more	-
LOW	`postinstall obfuscation`	25	content/consent-reminder-notification/build.jspublic/sprites/premium-campaign/banner-5-inverted.svgexecutors/200.js +22 more	-
LOW	`postinstall crypto operations`	28	ad-blocker/background.jsexecutors/304.jscontent/consent-reminder-notification/build.js +25 more	-
LOW	`postinstall file manipulation`	28	executors/305.jsservice-worker/anti-malware.jsexecutors/301.js +25 more	-
LOW	`postinstall network communication`	34	content/consent-reminder-notification/build.jsexecutors/305.jsexecutors/310.js +31 more	-
LOW	`postinstall registry modification`	10	content/content.jspopup/build.jsservice-worker/anti-malware.js +7 more	-
LOW	`postinstall system command`	15	ad-blocker/content.jscontent/anti-male-ware-notification/build.jscontent/vpn-notification/build.js +12 more	-
LOW	`OriginsNotVerified`	3	executors/200.jsad-blocker/content.jsexecutors/308.js	-

Show network indicators (586)

Publisher Evidence

Limited evidence

[email protected]

Publisher identity, store signals, distribution reach, and warning signals used for context. Treat this as supporting evidence, not a clean bill of health.

Chrome does not expose the same publisher verification data as IDE stores, so this score is deliberately conservative.

Noisy-finding weight

x1.00

Publisher domain

urban-vpn.com

Observed

Store verification signal

Limited signal

Limited

Extension portfolio

Portfolio

13 evidence rows available.

Finding Categories

Obfuscation

Network

586

IoC Indicators

YARA Rules Matched

14 rules(217 hits)

credential env files postinstall persistence mechanism NoUseWeakRandom postinstall file download UntrustedContentShouldNotBeIncluded LocalStorageShouldNotBeUsed DebuggerStatementsShouldNotBeUsed postinstall obfuscation postinstall crypto operations postinstall file manipulation postinstall network communication postinstall registry modification postinstall system command OriginsNotVerified

Requested Permissions

13 permissions

management

Manage other installed extensions

Dangerous

proxy

Control the browser's proxy settings

Dangerous

<all_urls>

Access and modify data on every website you visit

Dangerous

webRequest

Intercept, modify, and block all network requests

High

tabs

Medium

webRequestAuthProvider

Low

offscreen

Low

alarms

Low

scripting

Low

storage

Low

webNavigation

Low

https://*.bugsnag.com/*

Low

privacy

Low

AI Security Report

AI Security Review

Summary

Urban VPN Proxy is a Chrome VPN extension scoring 100/CRITICAL with 1,448 IoC matches and 39 suspicious network findings. The YARA hits on font files are code-smell false positives, but the core JS files (requests.js, content.js, extend-native-history-api.js) show obfuscation, file manipulation, network communication, and file download patterns consistent with a proxy extension exfiltrating traffic or injecting content. Top 1% risk percentile among 1,000 peers.

Key Reasons

1,448 IoC matches indicate extensive external endpoint references typical of proxy/tracking infrastructure
requests.js triggers obfuscation + file_manipulation + network_communication + file_download — a high-risk combination for a VPN extension
content.js shows credential_env_files + obfuscation + file_manipulation, suggesting credential harvesting capability
History API manipulation (extend-native-history-api.js) is a known technique for tracking browsing behavior

Reviewed 2026-03-13; recommended action: runtime analysis; model confidence 85%.

Chrome version history

Risk trend by version

13 analyzed versions. Each point is the latest successful scan for that version; failed zero-score scans are hidden. Dates are based on first seen by risky plugins.

Selected

Change since first

Change from previous

No change

Versions:

First analyzed version

5.11.3

Jan 21, 2026

Risk range

60 to 65

Across analyzed versions

Latest analyzed version

5.14.4

Sep 1, 2026

Selected version

medium

Version

v5.14.4

1 months ago

Risk score

Findings

849

Change vs previous

No change

Pick any point on the chart to explore that version's code below.

Source Code Viewer

Source Code Not Available

Source code is not available for this version of the extension.

About This Extension

Urban VPN: Your Free, Secure VPN Proxy Get secure VPN access to any website and unblock content with Urban VPN. Mask your online identity, stay protected & hide your IP with Urban Free VPN Proxy for Chrome! Urban VPN Free proxy servers are available in 82 countries, hiding your IP and encrypting your internet connection. Urban Cyber Security is the developer of Urban VPN Proxy that provides the most reliable virtual private network, and access to a vast network of 632 free VPN servers. With Urban VPN browser extension for Chrome, you can further enjoy advanced VPN protection, if you choose to protect your browser from phishing attempts, malware and intrusive ads. When you add the Urban free VPN Proxy extension, you get the following: 🌍 Change Your IP Location - Connect to any of our 632 VPN servers in 82 countries, giving you the flexibility to browse with a new IP address. 🛡️ Hide your IP - Protect your IP address by minimizing IP tracking from websites, helping you enjoy a more private online experience. 🔒 Encrypted Connections - With Urban VPN, your traffic stays encrypted using the latest OpenVPN standards, ensuring that ISPs cannot throttle your connection. ⚙️Double VPN – Available in selected VPN locations and gradually rolling out to more. In supported regions, your connection is encrypted twice and sent through 2 VPN servers, no extra setup required. 🛡️ Avoid being tracked by websites- bypass firewalls and browse anonymously! 🛡️ Your ISP may throttle your connection, but when Urban VPN is turned on, your browsing is encrypted, preventing ISPs from throttling your bandwidth. 🔐 Advanced VPN Protection - protection from phishing attempts, malware and intrusive ads. Avoid harmful ads by enabling our ad-blocking feature. (optional). There is no need to download additional software - just click to download, install the extension, and start surfing. Using the Advanced VPN protection features enables you to enjoy anti-phishing, anti-malware, and blocking malicious ads for your browsing. To use the Advance VPN Protection features, we process certain browsing information such as visited URLs, ads shown and interactions with such ads, clickstream data, IP address, and related web activity. This data is sent to our servers for security analysis. Subject to your acceptance of the prominent disclosures provided, we further encourage you to review our privacy policy before installing the Urban VPN extension, available here: Privacy Policy https://www.urban-vpn.com/about-us/privacy-policy-urban-proxy/

Frequently Asked Questions

Similar Extensions

Related extensions from the same publisher or marketplace

Urban AdBlocker

[email protected]

MEDIUM 50K users

Urban Browser Guard

[email protected]

LOW 300K users

Urban Safe Browsing

[email protected]

MINIMAL 60K users

种草星球-TikTok爆单神器，商品自动提报采集邀评【永久免费】

[email protected]

CRITICAL 5 users

Kindredly - A safer, private web for families

[email protected]

CRITICAL 19 users

Open Headers

[email protected]

CRITICAL 72 users

Urban VPN Proxy

Analysis record

Evidence ledger

OBFUSCATION-UNICODE_HEAVY-popup/build.js-1

NET-FETCH-service-worker/index.js-10888

NET-FETCH-service-worker/index.js-1859

NET-FETCH-service-worker/index.js-2079

NET-FETCH-service-worker/index.js-27742

NET-FETCH-service-worker/index.js-8112

NET-FETCH-service-worker/index.js-13866

NET-FETCH-service-worker/index.js-24291

NET-FETCH-service-worker/index.js-1869

NET-FETCH-offscreen/worker.js-1

NET-FETCH-service-worker/index.js-28047

NET-FETCH-service-worker/index.js-13923

NET-FETCH-service-worker/index.js-25697

NET-FETCH-service-worker/index.js-2831

NET-FETCH-service-worker/index.js-24172

NET-FETCH-service-worker/index.js-11537

NET-FETCH-service-worker/index.js-13863

NET-FETCH-service-worker/index.js-27977

NET-FETCH-service-worker/index.js-1949

NET-FETCH-service-worker/index.js-27291

NET-FETCH-service-worker/index.js-27666

NET-FETCH-service-worker/index.js-3003

NET-FETCH-service-worker/index.js-13768

NET-FETCH-service-worker/index.js-39771

NET-FETCH-service-worker/index.js-19864

YARA Rule Matches

Publisher Evidence

Finding Categories

YARA Rules Matched

Requested Permissions

AI Security Report

AI Security Review

Summary

Key Reasons

Risk trend by version

About This Extension

Frequently Asked Questions

Similar Extensions

Urban AdBlocker

Urban Browser Guard

Urban Safe Browsing

种草星球-TikTok爆单神器，商品自动提报采集邀评【永久免费】

Kindredly - A safer, private web for families

Open Headers