Extension Auditor
Extension Auditor
Sign Up

Adblock for Chrome

ID: onomjaelhagjjojbkcafidnepbfkpnee

Could be malicious

Supported Languages

🇬🇧British English
🇺🇸English

Extension Info & Metadata

Status
Removed
Version
3.3.3
Size
2.94 MB
Rating
4.8/5
Reviews
15,619
Users
600,000
Type
Extension
Updated
Sep 10, 2024
Category
Productivity Workflow
Price
Free
Featured
Yes
Visibility
Listed
Mature
No
By Google
No
Trusted
Yes
Download CRX
Chrome Web Store
Report Issue

Publisher Contextual Analysis

Trusted
Author
adblockforchromeView Profile
Privacy
Privacy Policy
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
Yes
Mailbox exists
Yes
Total Extensions
1
Active
0
Obsolete
1
Listed
1
Unlisted
0
Total Users
600,000

Easily blocks ads on all websites in your browser.

Adblock for Chrome - Your Essential Ad Blocker Adblock for Chrome is your ideal solution for a cleaner, quicker, and more secure browsing experience. This extension boosts your web performance with a comprehensive set of filter lists and advanced features, all working autonomously. Main Features: - Efficiently blocks ads, banners, and pop-ups - Prevents ads from appearing on external websites - Halts the loading of preroll ads - No configuration necessary, with no complex lists to maintain - Blocks all pre-roll video ads on almost any site - Consistently blocks banner and text ads - Completely free and regularly updated If you find Adblock for Chrome helpful, we’d appreciate your positive feedback. Note: To provide you with the best experience, our extension periodically checks for updates from our server. This requires the "alarms" permission, but rest assured that no personal information is tracked or stored during this process. These updates help ensure your extension remains up-to-date and functions smoothly.

Item
Type
Severity
Description
declarativeNetRequest
Permission
Critical
This permission allows the extension to define rules to block, redirect, or modify network requests. Rated Critical because it can control all network traffic, potentially blocking security updates or redirecting to malicious sites.
declarativeNetRequestWithHostAccess
Permission
Critical
This permission combines network request modification with host permissions. Rated Critical because it can modify requests for specific domains, potentially targeting sensitive websites with precise attack rules.
scripting
Permission
Critical
This permission allows injection and execution of JavaScript on any webpage. Rated Critical because it can modify page content, steal sensitive data, and inject malicious code into any site the extension has access to.
webRequest
Permission
Critical
This permission enables the extension to monitor and analyze all web requests made by the browser. Rated Critical because it can observe all network traffic including sensitive data, track browsing behavior, and gather authentication tokens.
<all_urls>
Host
Critical
Broad host access — the extension can read/modify content on every website.
Contextual Risk Factors
Risk Factor
High
The following context increases the overall risk:• 10% increase: Early script execution enables pre-emptive content manipulation
Broad Host Permissions
Risk Factor
High
This extension has broad host permissions allowing it to access many or all websites.
Broad Content Script Access
Risk Factor
High
This extension can inject scripts into any website.
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
unlimitedStorage
Permission
Medium
This permission removes storage quota restrictions. Rated Medium because it can store large amounts of user data without limits, potentially impacting browser performance and storing extensive tracking data.
tabs
Permission
Medium
This permission enables tab management and monitoring. Rated Medium because it can track open tabs, access tab metadata, and monitor user browsing patterns.
Early Content Script Execution
Risk Factor
Medium
This extension runs content scripts at document_start.
alarms
Permission
Low
This permission schedules periodic tasks. Rated Low because it can only trigger events at specified times without access to sensitive data.

By severity

Critical1
High4
Medium4
Low0

Versions scanned

Showing 2 of 15 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension VersionCode Review Findings
1.2.54
1.15

Files with findings

4 distinct paths — top paths by unique finding count:

  • js/background.js5
  • manifest.json2
  • js/assets.js1
  • manifest 2.json1
S.No.
Category
Severity
File
Summary
Found in Version
1Remote Code Loading
critical
js/background.js (line 182)The `assetsBootstrapLocation` is pointed at an attacker-controlled server (`server.adblock-for-chrome.com`) rather than being left unset (which is its default in genuine uBlock Origin, causing it to use the bundled `a…
1.1
2Remote Code Loading
high
manifest.json (line 64)The manifest's Content Security Policy has been deliberately relaxed to whitelist `https://www.google-analytics.com` as an allowed external script source. This is a hardcoded deviation from uBlock Origin's standard ma…
1.1
3Remote Code Loading
high
js/background.js (line 261)The background page schedules a forced self-reload every 24 hours via `setTimeout`. Combined with the attacker-controlled `assetsBootstrapLocation`, this guarantees the extension periodically re-fetches the remote con…
1.1
4Tracking
high
js/background.js (line 239)This background script dynamically injects Google Analytics into the extension's privileged background page and sends telemetry tagged with the installed version. Using `displayfeatures` makes the tracking more invasi…
1.2.5
5Tracking
high
js/background.js (line 235)The extension dynamically loads the full Google Analytics library from an external third-party server (`https://www.google-analytics.com/analytics.js`) into its persistent background page. It calls `ga('require', 'dis…
1.1
6Other
medium
js/assets.js (line 352)If no cached registry exists, the extension downloads its asset source registry from `µBlock.assetsBootstrapLocation` at runtime. In `js/background.js`, that bootstrap URL is hardcoded to `https://server.adblock-for-c…
1.2.5
7Remote Code Loading
medium
manifest.json (line 63)The extension explicitly allows remote scripts from `https://www.google-analytics.com` in its CSP. In a privileged MV2 background page, that means code hosted off-store can execute inside the extension context, which …
1.2.5
8Tracking
medium
js/background.js (line 261)The extension phones users to vendor-controlled pages on both install and uninstall. Opening a remote page automatically after installation and setting a remote uninstall callback are common lifecycle-tracking hooks a…
1.2.5
9Tracking
medium
manifest 2.json (line 62)A second manifest file exists in the extension package with a different CSP whitelisting `https://www.googletagmanager.com/gtag/js` instead of `google-analytics.com`. The presence of two manifests with two distinct ex…
1.1
URLs
74
IPv4
186
IPv6
1

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

Gain full insight into all external connections.

Upgrade for full visibility.

Sign In
clients2.google.com/service/update2/crxhttps://clients2.google.com/service/update2/crx
reactjs.org/docs/error-decoder.htmlhttps://reactjs.org/docs/error-decoder.html?invariant=
www.w3.org/1999/xlinkhttp://www.w3.org/1999/xlink
www.w3.org/XML/1998/namespacehttp://www.w3.org/XML/1998/namespace
www.w3.org/2000/svghttp://www.w3.org/2000/svg
www.w3.org/1998/Math/MathMLhttp://www.w3.org/1998/Math/MathML
www.w3.org/1999/xhtmlhttp://www.w3.org/1999/xhtml
jedwatson.github.io/classnameshttp://jedwatson.github.io/classnames
developer.mozilla.org/en-US/docs/Web/CSS/CSS_Logical_Properties.https://developer.mozilla.org/en-US/docs/Web/CSS/CSS_Logical_Properties.
*.*.pw/v/http://*.*.pw/v/
Showing 1 to 10 of 80 rows
Rows per page:

Gain full insight into all external connections.

Upgrade for full visibility.

Sign In
1.2.3.4
IPv4
-
37.220.26.135
IPv4
-
37.220.26.136
IPv4
-
37.220.26.137
IPv4
-
52.210.16.150
IPv4
-
77.247.178.41
IPv4
-
78.140.134.198
IPv4
-
78.140.149.216
IPv4
-
88.85.75.147
IPv4
-
88.85.77.92
IPv4
-
91.207.192.31
IPv4
-
95.211.125.226
IPv4
-
95.213.231.34
IPv4
-
37.220.36.15
IPv4
-
37.1.217.113
IPv4
-
37.1.207.65
IPv4
-
37.1.201.32
IPv4
-
5.45.126.35
IPv4
-
5.1.35.2
IPv4
-
78.46.107.144
IPv4
-
88.150.149.92
IPv4
-
149.56.24.226
IPv4
-
139.99.120.222
IPv4
-
90.63.192.161
IPv4
-
198.16.64.66
IPv4
-
213.206.98.70
IPv4
-
62.212.73.45
IPv4
-
46.105.62.117
IPv4
-
176.31.96.119
IPv4
-
5.188.62.157
IPv4
-
188.72.219.36
IPv4
-
38.242.198.170
IPv4
-
5.182.211.129
IPv4
-
173.249.8.3
IPv4
-
185.145.131.204
IPv4
-
173.212.233.209
IPv4
-
158.69.120.31
IPv4
-
1.4.2.1
IPv4
-
111.90.150.149
IPv4
-
111.90.159.132
IPv4
-
173.249.49.204
IPv4
-
117.254.84.212
IPv4
-
35.232.188.118
IPv4
-
35.224.227.218
IPv4
-
34.70.28.179
IPv4
-
185.165.169.108
IPv4
-
23.109.87.42
IPv4
-
162.252.214.4
IPv4
-
167.99.31.227
IPv4
-
203.195.121.11
IPv4
-
23.109.87.101
IPv4
-
37.1.209.213
IPv4
-
51.77.227.100
IPv4
-
51.77.227.101
IPv4
-
51.77.227.102
IPv4
-
51.77.227.103
IPv4
-
51.77.227.96
IPv4
-
51.77.227.97
IPv4
-
51.77.227.98
IPv4
-
51.77.227.99
IPv4
-
51.89.187.136
IPv4
-
51.89.187.137
IPv4
-
51.89.187.138
IPv4
-
51.89.187.139
IPv4
-
51.89.187.140
IPv4
-
51.89.187.141
IPv4
-
51.89.187.142
IPv4
-
51.89.187.143
IPv4
-
167.206.10.148
IPv4
-
142.91.159.107
IPv4
-
143.244.184.39
IPv4
-
146.59.223.83
IPv4
-
176.31.68.242
IPv4
-
185.147.34.126
IPv4
-
23.109.150.101
IPv4
-
23.109.82.104
IPv4
-
23.109.82.74
IPv4
-
23.109.87.71
IPv4
-
5.45.79.15
IPv4
-
51.178.195.171
IPv4
-
51.195.115.102
IPv4
-
51.89.115.13
IPv4
-
192.151.218.66
IPv4
-
23.224.89.2
IPv4
-
156.233.32.123
IPv4
-
199.180.100.185
IPv4
-
104.167.70.98
IPv4
-
121.204.246.13
IPv4
-
154.7.80.158
IPv4
-
194.59.220.161
IPv4
-
23.234.217.11
IPv4
-
23.234.217.12
IPv4
-
103.21.91.144
IPv4
-
107.148.199.181
IPv4
-
107.165.206.26
IPv4
-
107.183.137.18
IPv4
-
107.187.122.172
IPv4
-
119.29.207.87
IPv4
-
121.40.25.88
IPv4
-
122.114.239.160
IPv4
-
134.73.54.252
IPv4
-
136.0.56.196
IPv4
-
137.175.69.92
IPv4
-
142.0.129.74
IPv4
-
146.148.85.61
IPv4
-
154.196.143.171
IPv4
-
156.232.37.2
IPv4
-
156.246.162.2
IPv4
-
163.197.136.33
IPv4
-
163.197.167.236
IPv4
-
164.155.185.254
IPv4
-
172.121.4.251
IPv4
-
172.121.4.252
IPv4
-
174.139.53.195
IPv4
-
180.76.171.28
IPv4
-
210.65.10.32
IPv4
-
211.167.105.131
IPv4
-
213.232.113.250
IPv4
-
216.172.154.226
IPv4
-
220.115.251.25
IPv4
-
221.204.213.222
IPv4
-
222.186.12.235
IPv4
-
23.244.43.212
IPv4
-
23.89.50.180
IPv4
-
60.190.139.164
IPv4
-
50.7.31.228
IPv4
-
107.172.176.197
IPv4
-
107.182.131.103
IPv4
-
108.171.248.234
IPv4
-
115.29.46.146
IPv4
-
120.27.34.156
IPv4
-
121.43.114.38
IPv4
-
122.228.200.55
IPv4
-
174.123.15.43
IPv4
-
180.96.27.85
IPv4
-
202.102.26.253
IPv4
-
219.128.77.113
IPv4
-
23.91.3.114
IPv4
-
47.100.0.249
IPv4
-
58.218.200.135
IPv4
-
59.36.101.209
IPv4
-
61.10.2.86
IPv4
-
61.164.108.184
IPv4
-
70.86.24.120
IPv4
-
75.125.41.29
IPv4
-
115.28.114.149
IPv4
-
117.60.146.16
IPv4
-
120.132.57.41
IPv4
-
127.0.0.1
IPv4
-
182.150.59.104
IPv4
-
210.40.130.91
IPv4
-
172.86.179.138
IPv4
-
208.94.244.100
IPv4
-
208.94.244.98
IPv4
-
111.75.255.103
IPv4
-
110.93.143.144
IPv4
-
149.13.65.144
IPv4
-
180.76.2.18
IPv4
-
193.197.158.209
IPv4
-
195.10.245.55
IPv4
-
208.88.226.75
IPv4
-
212.227.100.108
IPv4
-
212.95.32.75
IPv4
-
216.18.184.18
IPv4
-
62.160.52.73
IPv4
-
66.228.52.30
IPv4
-
67.228.151.70
IPv4
-
72.172.88.25
IPv4
-
74.55.82.102
IPv4
-
79.125.117.123
IPv4
-
160.16.86.134
IPv4
-
58.205.218.4
IPv4
-
199.19.203.46
IPv4
-
81.176.238.128
IPv4
-
77.91.202.130
IPv4
-
85.114.133.62
IPv4
-
213.133.100.18
IPv4
-
62.146.108.97
IPv4
-
88.198.13.8
IPv4
-
149.13.77.20
IPv4
-
153.120.62.146
IPv4
-
184.106.248.76
IPv4
-
200.72.40.46
IPv4
-
91.116.142.114
IPv4
-
184.154.142.242
IPv4
-
187.6.64.32
IPv4
-
1:2:3:4:5:6:7:8
IPv6
-
Showing 1 to 187 of 190 rows
Rows per page:
Version
Size
Is Malicious
Findings
Permhash
3.3.2
Latest
2.94 MB
Malicious
—
6912c7a74b11bddeb9c7462772150fead4510947ef96d68e91fc804d98f6c24c
3.3.1
2.94 MB
Malicious
—
13b032e78b3e8998b22f2744bc8f9baf9fc1dfc69dbd174c37bb973618aef44d
3.3.0
2.94 MB
Malicious
—
13b032e78b3e8998b22f2744bc8f9baf9fc1dfc69dbd174c37bb973618aef44d
1.2.9
1.03 MB
Malicious
—
61ef1ef31381e1437623d4ff4f0fa311cc2c3a10e93f0841993d0cf7cec911e0
1.2.8
1.03 MB
Malicious
—
61ef1ef31381e1437623d4ff4f0fa311cc2c3a10e93f0841993d0cf7cec911e0
1.2.7
1.00 MB
Malicious
—
61ef1ef31381e1437623d4ff4f0fa311cc2c3a10e93f0841993d0cf7cec911e0
1.2.6
1.00 MB
Malicious
—
61ef1ef31381e1437623d4ff4f0fa311cc2c3a10e93f0841993d0cf7cec911e0
1.2.5
1.00 MB
Malicious
4
61ef1ef31381e1437623d4ff4f0fa311cc2c3a10e93f0841993d0cf7cec911e0
1.2.4
1.00 MB
Malicious
—
61ef1ef31381e1437623d4ff4f0fa311cc2c3a10e93f0841993d0cf7cec911e0
1.2.3
1.00 MB
Malicious
—
61ef1ef31381e1437623d4ff4f0fa311cc2c3a10e93f0841993d0cf7cec911e0
Showing 1 to 10 of 20 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files (scanned top 25 shared text files)

No comparable text files found between these versions.

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

Sign In