Just sharing this write up about vulnerabilities in their client: https://gergelykalman.com/why-you-shouldnt-use-a-commercial-vpn-amateur-hour-with-windscribe.html

This comes to mind - I use it personally everyday and find it comes in handy for tasks like you’ve described above: https://github.com/TrianguloY/URLCheck