Oyster VPN

[calcu007 5]

Any feedback? 

[OpenSourcerer 1441]

• They don't appear to use M247 at all. Rather, most of it is OVH, most of the world is OneProvider and US is a mix of Limestone, Leaseweb and OVH. IP-APIs check out regarding their locations: Dubai (UAE), Moscow (RU), Mumbai (IN) and Kuala Lumpur (MY) all seem to be in the advertised cities.
• Bit of bling-bling on the website. Usage of Google Analytics. Stripe is the payment processor. Website sends CSP reports to Stripe.*
• I think I remember that little man in the picture from another provider… and the art style, too. Could simply be pictograms bought from the same source – or taken from the asset pool of another VPN provider in the same "family". The latter would hint at this provider not being independent.
• DNS leak test uses https://bash.ws/ as its test backend.
• A range of Google Analytics and advertising in the Android app, making it closed source. No source code for the PC app, either.
• Offers strange malware protection feature. Impossible, unless DNS requests are looked at.

I'd say, just another run-of-the-mill provider, not really distinguishing itself from the masses.

* CSP reports are a tool for web devs to get insight into content violating the X-Content-Security-Policy header policy. It's meant for development purposes and should not appear in production – because otherwise it represents another data point for tracking.