Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: AdBlock Suite

CRITICAL RISKRemoved from Chrome Web Store

AdBlock Suite

ID: gekoepiplklhniacchbbgbhilidiojmb

Could be malicious

Supported Languages

🇺🇸English

🇫🇷French

🇩🇪German

🇰🇷Korean

🇪🇸Spanish

Extension Info & Metadata

Status

Removed

Version

1.3.2

Size

7.85 MB

Rating

4.6/5

Reviews

2,317

Users

818,605

Type

Extension

Updated

Sep 13, 2023

Publisher Contextual Analysis

Trusted

Author: http://adbs.ioView Profile
Privacy: Privacy Policy
Help: Help Center
MX records exist: No
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: No
Website: Visit

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

818,605

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Remove all ads from websites

✓ Remove all ads from websites! ✓ Trusted by over 30 million users ✓ Easy to use Features: + Blocks ads, banners, pop-ups and pop-unders on all websites + Prevents pre-roll ads from loading on YouTube™ + Protects against malicious malware downloads + Blocks ads on external pages that load YouTube™ videos + Improves video and web page loading speed + Keeps web pages clean and shows only relevant and desired content Annoyed by ads on websites? Then install AdBlock Suite now and instantly put an end to annoying ad breaks, pesky pop-ups, banners and malicious malware download buttons. AdBlock Suite is a browser extension for filtering content and blocking ads. AdBlock Suite automatically skips pre-roll video ads, removes ad banners and shows you only content you want to see. Adblock Suite blocks all ads and does not allow "Acceptable Ads" either. About Extension Permissions & Privacy Like all adblockers, we require certain extension permissions to block ads on third-party websites. All detection happens locally on your computer. AdBlock Suite does not send or track any data. The source code of AdBlock Suite is open and can be reviewed by anyone at any time. Download and use are free, so have fun with AdBlock Suite! Note: AdBlock Suite is also available as a paid premium version including a VPN solution on our website.

User Growth

Showing data from Nov 20, 2022 to Sep 20, 2023

Versions

+7.89%(+59,884 users)

Compared to 3 months ago

12 versions released in this period

Rating Count

Total: 2,317 ratings+8 (0%)

Average Rating

Current: 4.62 / 5.0+0.12

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical3

High7

Medium2

Low0

Versions scanned

Showing 2 of 12 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1.0.4 Code review	5
1.0.1 Code review	7

Extension Version	Code Review Findings
1.0.4	5
1.0.1	7

Files with findings

2 distinct paths — top paths by unique finding count:

background.js10
contentListener.js2

S.No.	Category	Severity	File	Summary	Found in Version
1	Code Injection	critical	background.js (line 2686)	The ContentDeliveryService uses `chrome.scripting.executeScript()` to inject a remotely-defined function (`Creative.build`) directly into the DOM of any website the user visits that matches server-controlled URL patte…	1.0.1
2	Remote Code Loading	critical	background.js (line 2603)	The ContentDeliveryService fetches server-defined URL regex patterns from `cd.unistream.io` every 60 minutes and compiles them into live RegExp objects that control when script injection fires on visited pages. This m…	1.0.1
3	Unauthorized Data Collection	critical	background.js (line 2907)	The embedded Unistream SearchService intercepts every search query the user makes on 11 major search engines (Google, Bing, Yahoo, DuckDuckGo, Baidu, Yandex, Brave, etc.) by monitoring tab URL changes. The extracted s…	1.0.1
4	Code Injection	high	background.js (line 4029)	After fetching remote interaction data, the extension uses `chrome.scripting.executeScript` to inject `creative.build` into arbitrary tabs. That injected code creates page overlays/iframes using server-provided creati…	1.0.4
5	Data Exfiltration	high	background.js (line 7065)	The background worker takes stored customer identifiers/tokens and sends them as authentication headers to a remote API. Elsewhere in this file, `LICENSE_CHECK_URL` is built from `http://api.adbs.io`, so the extension…	1.0.4
6	Remote Code Loading	high	background.js (line 3103)	This bundled `Unistream` subsystem pulls remote `interactions` and `options` from a server-side content-delivery API. Because those interaction objects are later used to drive what gets injected into tabs, the extensi…	1.0.4
7	Remote Code Loading	high	background.js (line 3697)	The extension fetches ad-blocking regex rules daily from `https://api.adblock-for-youtube.com/api/v1/adregex` — a third-party domain unrelated to the extension publisher — and applies them as live `declarativeNetReque…	1.0.1
8	Tracking	high	background.js (line 1872)	The `WebsiteService` base class (parent of both `SearchService` and `ContentDeliveryService`) registers a persistent `chrome.tabs.onUpdated` listener that intercepts the full URL of every page load across all tabs. Th…	1.0.1
9	Unauthorized Data Collection	high	contentListener.js (line 1773)	This content script runs on `https://app.adbs.io/*` and reads `cid` and `token` directly from the page's `localStorage`, then forwards them into the extension. Pulling authentication material out of a website context …	1.0.4
10	Unauthorized Data Collection	high	background.js (line 3365)	The Unistream PingService sends a PATCH request to `https://data.unistream.io/user` every 15 minutes, transmitting the extension version and a unique user UUID to a third-party analytics server. This creates a persist…	1.0.1
11	Credential Theft	medium	contentListener.js (line 1218)	The `contentListener.js` content script — injected exclusively into `https://app.adbs.io/*` — reads authentication tokens (`token`, `cid`, `expDate`) directly from the site's `localStorage` and forwards them to the ba…	1.0.1
12	Tracking	medium	background.js (line 6970)	The extension hooks `webRequest` events for every URL and continuously counts all completed and failed requests. Even though this code stores counters rather than full URLs, it is still broad browsing-activity telemet…	1.0.4

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

811

IPv4

239

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


mail.mozilla.org	/pipermail/dev-addons/2017-April/002729.html	https://mail.mozilla.org/pipermail/dev-addons/2017-April/002729.html
developer.mozilla.org	/en-US/docs/Web/API/DOMParser	https://developer.mozilla.org/en-US/docs/Web/API/DOMParser#Error_handling
www.w3.org	/1999/xhtml	http://www.w3.org/1999/xhtml
kb.adguard.com	/en/general/how-to-create-your-own-ad-filters	https://kb.adguard.com/en/general/how-to-create-your-own-ad-filters#html-filtering-rules-syntax-1
github.com	/AdguardTeam/AdguardBrowserExtension/issues/959	https://github.com/AdguardTeam/AdguardBrowserExtension/issues/959
github.com	/AdguardTeam/CoreLibs/issues/45	https://github.com/AdguardTeam/CoreLibs/issues/45
developer.mozilla.org	/en/JavaScript/Reference/Global_Objects/regexp	https://developer.mozilla.org/en/JavaScript/Reference/Global_Objects/regexp
developer.mozilla.org	/en-US/docs/Web/JavaScript/Guide/Grammar_and_types	https://developer.mozilla.org/en-US/docs/Web/JavaScript/Guide/Grammar_and_types#using_special_characters_in_strings
kb.adguard.com	/en/general/how-to-create-your-own-ad-filters	https://kb.adguard.com/en/general/how-to-create-your-own-ad-filters#basic-rules
github.com	/AdguardTeam/AdguardBrowserExtension/issues/978	https://github.com/AdguardTeam/AdguardBrowserExtension/issues/978

Showing 1 to 10 of 820 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


1.2.3.4	IPv4	-
13.3.3.7	IPv4	-
0.0.0.0	IPv4	-
192.168.1.13	IPv4	-
127.0.0.1	IPv4	-
85.114.133.62	IPv4	-
213.133.100.18	IPv4	-
62.146.108.97	IPv4	-
88.198.13.8	IPv4	-
149.13.77.20	IPv4	-
110.93.143.144	IPv4	-
149.13.65.144	IPv4	-
180.76.2.18	IPv4	-
193.197.158.209	IPv4	-
195.10.245.55	IPv4	-
208.88.226.75	IPv4	-
212.227.100.108	IPv4	-
212.95.32.75	IPv4	-
216.18.184.18	IPv4	-
62.160.52.73	IPv4	-
66.228.52.30	IPv4	-
67.228.151.70	IPv4	-
72.172.88.25	IPv4	-
74.55.82.102	IPv4	-
79.125.117.123	IPv4	-
160.16.86.134	IPv4	-
58.205.218.4	IPv4	-
199.19.203.46	IPv4	-
81.176.238.128	IPv4	-
77.91.202.130	IPv4	-
88.150.149.92	IPv4	-
90.63.192.161	IPv4	-
198.16.64.66	IPv4	-
213.206.98.70	IPv4	-
62.212.73.45	IPv4	-
46.105.62.117	IPv4	-
176.31.96.119	IPv4	-
37.220.26.135	IPv4	-
37.220.26.136	IPv4	-
37.220.26.137	IPv4	-
52.210.16.150	IPv4	-
77.247.178.41	IPv4	-
78.140.134.198	IPv4	-
78.140.149.216	IPv4	-
88.85.75.147	IPv4	-
88.85.77.92	IPv4	-
91.207.192.31	IPv4	-
95.211.125.226	IPv4	-
95.213.231.34	IPv4	-
37.220.36.15	IPv4	-
37.1.217.113	IPv4	-
37.1.207.65	IPv4	-
37.1.201.32	IPv4	-
5.45.126.35	IPv4	-
5.1.35.2	IPv4	-
78.46.107.144	IPv4	-
149.56.24.226	IPv4	-
139.99.120.222	IPv4	-
192.151.218.66	IPv4	-
23.224.89.2	IPv4	-
156.233.32.123	IPv4	-
199.180.100.185	IPv4	-
104.167.70.98	IPv4	-
121.204.246.13	IPv4	-
154.7.80.158	IPv4	-
194.59.220.161	IPv4	-
23.234.217.11	IPv4	-
23.234.217.12	IPv4	-
103.21.91.144	IPv4	-
107.148.199.181	IPv4	-
107.165.206.26	IPv4	-
107.183.137.18	IPv4	-
107.187.122.172	IPv4	-
119.29.207.87	IPv4	-
121.40.25.88	IPv4	-
122.114.239.160	IPv4	-
134.73.54.252	IPv4	-
136.0.56.196	IPv4	-
137.175.69.92	IPv4	-
142.0.129.74	IPv4	-
146.148.85.61	IPv4	-
154.196.143.171	IPv4	-
156.232.37.2	IPv4	-
156.246.162.2	IPv4	-
163.197.136.33	IPv4	-
163.197.167.236	IPv4	-
164.155.185.254	IPv4	-
172.121.4.251	IPv4	-
172.121.4.252	IPv4	-
174.139.53.195	IPv4	-
180.76.171.28	IPv4	-
210.65.10.32	IPv4	-
211.167.105.131	IPv4	-
213.232.113.250	IPv4	-
216.172.154.226	IPv4	-
220.115.251.25	IPv4	-
221.204.213.222	IPv4	-
222.186.12.235	IPv4	-
23.244.43.212	IPv4	-
23.89.50.180	IPv4	-
60.190.139.164	IPv4	-
50.7.31.228	IPv4	-
107.172.176.197	IPv4	-
107.182.131.103	IPv4	-
108.171.248.234	IPv4	-
115.29.46.146	IPv4	-
120.27.34.156	IPv4	-
121.43.114.38	IPv4	-
122.228.200.55	IPv4	-
174.123.15.43	IPv4	-
180.96.27.85	IPv4	-
202.102.26.253	IPv4	-
219.128.77.113	IPv4	-
23.91.3.114	IPv4	-
47.100.0.249	IPv4	-
58.218.200.135	IPv4	-
59.36.101.209	IPv4	-
61.10.2.86	IPv4	-
61.164.108.184	IPv4	-
70.86.24.120	IPv4	-
75.125.41.29	IPv4	-
115.28.114.149	IPv4	-
117.60.146.16	IPv4	-
120.132.57.41	IPv4	-
182.150.59.104	IPv4	-
210.40.130.91	IPv4	-
172.86.179.138	IPv4	-
208.94.244.100	IPv4	-
208.94.244.98	IPv4	-
111.75.255.103	IPv4	-
153.120.62.146	IPv4	-
5.188.62.157	IPv4	-
188.72.219.36	IPv4	-
38.242.198.170	IPv4	-
5.182.211.129	IPv4	-
173.249.8.3	IPv4	-
185.145.131.204	IPv4	-
173.212.233.209	IPv4	-
158.69.120.31	IPv4	-
1.4.2.1	IPv4	-
111.90.150.149	IPv4	-
111.90.159.132	IPv4	-
173.249.49.204	IPv4	-
117.254.84.212	IPv4	-
35.232.188.118	IPv4	-
35.224.227.218	IPv4	-
34.70.28.179	IPv4	-
185.165.169.108	IPv4	-
23.109.87.42	IPv4	-
162.252.214.4	IPv4	-
167.99.31.227	IPv4	-
203.195.121.11	IPv4	-
23.109.87.101	IPv4	-
37.1.209.213	IPv4	-
51.77.227.100	IPv4	-
51.77.227.101	IPv4	-
51.77.227.102	IPv4	-
51.77.227.103	IPv4	-
51.77.227.96	IPv4	-
51.77.227.97	IPv4	-
51.77.227.98	IPv4	-
51.77.227.99	IPv4	-
51.89.187.136	IPv4	-
51.89.187.137	IPv4	-
51.89.187.138	IPv4	-
51.89.187.139	IPv4	-
51.89.187.140	IPv4	-
51.89.187.141	IPv4	-
51.89.187.142	IPv4	-
51.89.187.143	IPv4	-
167.206.10.148	IPv4	-
142.91.159.107	IPv4	-
143.244.184.39	IPv4	-
146.59.223.83	IPv4	-
176.31.68.242	IPv4	-
185.147.34.126	IPv4	-
23.109.150.101	IPv4	-
23.109.82.104	IPv4	-
23.109.82.74	IPv4	-
23.109.87.71	IPv4	-
5.45.79.15	IPv4	-
51.178.195.171	IPv4	-
51.195.115.102	IPv4	-
51.89.115.13	IPv4	-
184.106.248.76	IPv4	-
200.72.40.46	IPv4	-
91.116.142.114	IPv4	-
184.154.142.242	IPv4	-
187.6.64.32	IPv4	-
192.168.178.150	IPv4	-
2.0.42.31	IPv4	-
2.1.53.57	IPv4	-
1.0.0.0	IPv4	-
109.163.231.44	IPv4	-
85.114.138.56	IPv4	-
212.109.224.91	IPv4	-
37.1.206.95	IPv4	-
2.0.37.99	IPv4	-
142.91.159.218	IPv4	-
162.215.254.42	IPv4	-
178.175.132.130	IPv4	-
188.165.178.248	IPv4	-
163.172.219.174	IPv4	-
2.0.79.23	IPv4	-
93.88.74.236	IPv4	-
5.45.86.39	IPv4	-
37.1.205.47	IPv4	-
2.0.83.50	IPv4	-
61.160.236.52	IPv4	-
173.192.147.21	IPv4	-
2.2.73.76	IPv4	-
5.61.55.143	IPv4	-
37.1.213.100	IPv4	-
91.208.197.24	IPv4	-
38.242.199.52	IPv4	-
217.16.188.246	IPv4	-
157.245.202.123	IPv4	-
38.242.194.12	IPv4	-
91.208.197.43	IPv4	-
91.208.197.115	IPv4	-
194.163.183.129	IPv4	-
206.189.151.55	IPv4	-
185.63.253.247	IPv4	-
91.230.121.24	IPv4	-
45.133.203.223	IPv4	-
190.115.18.20	IPv4	-
188.166.182.72	IPv4	-
167.99.71.200	IPv4	-
109.236.92.205	IPv4	-
50.7.161.20	IPv4	-
3.1.1.1	IPv4	-
192.168.0.1	IPv4	-
192.168.1.1	IPv4	-
2.0.53.29	IPv4	-
2.0.81.32	IPv4	-
2.0.33.47	IPv4	-
2.0.35.15	IPv4	-
2.0.4.54	IPv4	-
2.0.17.72	IPv4	-
1:2:3:4:5:6:7:8	IPv6	-
3:1:11:10:7:8:13:12	IPv6	-

Showing 1 to 241 of 250 rows

Rows per page:

4.9 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

FUNCIONA MELHOR DO QUES OS OUTROS ,PRA MIM É O MELHOR QUE ESTÁ TENDO

Gabriel André·19 Sept 2023

IT WORKED

Jushin prince Ryu R. Viador·18 Sept 2023

Youtube reklamlarında dahil bütün reklamları kaldırıyor

Ensar leventoğlu·18 Sept 2023

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

AdBlock Suite

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 12 Versions12

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating