Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Easy site blocker

CRITICAL RISKRemoved from Chrome Web Store

Easy site blocker

ID: epmmfnfpkjjhgikijelhmomnbeneepbe

Could be malicious

Supported Languages

🇧🇩Bengali

🇧🇷Brazilian Portuguese

🇬🇧British English

🇧🇬Bulgarian

🇪🇸Catalan

🇨🇳Chinese (Simplified)

🇹🇼Chinese (Traditional)

🇭🇷Croatian

🇨🇿Czech

🇩🇰Danish

🇳🇱Dutch

🇺🇸English

🇪🇪Estonian

🇵🇭Filipino

🇫🇮Finnish

🇫🇷French

🇩🇪German

🇬🇷Greek

🇮🇳Gujarati

🇮🇳Hindi

🇭🇺Hungarian

🇮🇩Indonesian

🇮🇹Italian

🇯🇵Japanese

🇰🇷Korean

🇲🇽Latin American Spanish

🇱🇻Latvian

🇱🇹Lithuanian

🇲🇾Malay

🇮🇳Malayalam

🇮🇳Marathi

🇳🇴Norwegian

🇵🇱Polish

🇵🇹Portuguese

🇷🇴Romanian

🇷🇺Russian

🇷🇸Serbian

🇸🇰Slovak

🇸🇮Slovenian

🇪🇸Spanish

🇸🇪Swedish

🇮🇳Tamil

🇮🇳Telugu

🇹🇭Thai

🇹🇷Turkish

🇺🇦Ukrainian

🇺🇸US English

🇻🇳Vietnamese

Extension Info & Metadata

Status

Removed

Version

1.4.3

Size

0.42 MB

Rating

4.3/5

Reviews

Users

100,000

Type

Extension

Updated

Oct 20, 2021

Publisher Contextual Analysis

Author: Buta BliontView Profile
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

100,000

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Easy site blocker. Block web sites access with PIN code

Easy Site Blocker is an easy-to-user site blocker. The pages are protected with a PIN code. You can schedule a specific time period. Please note that website protection could be easily bypassed by a tech-savvy person. You can remove the extension or tamper with its internal state to bypass our protection. Features: ⭐ Four-digit PIN code ⭐ Schedule by weekdays and time ⭐ Settings page protected with PIN code

User Growth

No data available

No user growth data available for this extension

Rating Count

No data available

No rating count data available for this extension

Average Rating

No data available

No rating data available for this extension

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical0

High1

Medium1

Low1

Versions scanned

Showing 1 of 3 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1.4.1 Code review	3

Extension Version	Code Review Findings
1.4.1	3

Files with findings

2 distinct paths — top paths by unique finding count:

background.js2
manifest.json1

S.No.	Category	Severity	File	Summary	Found in Version
1	Network Interception	high	background.js (line 153)	The listener strips `Content-Security-Policy` and `X-Frame-Options` from HTTP responses for every domain in the user's block list. CSP prevents XSS attacks and X-Frame-Options prevents clickjacking; removing them is n…	1.4.1
2	Other	medium	manifest.json (line 20)	The bundled manifest declares a `content_security_policy` permitting `'unsafe-eval'` and remote script loading from `https://www.google-analytics.com`. This field does not appear in the published CWS manifest summary,…	1.4.1
3	Remote Code Loading	low	background.js (line 1)	The background page dynamically injects an external script from `https://www.google-analytics.com/analytics.js` via DOM manipulation and sends a pageview beacon. While Google Analytics is a known third-party, loading …	1.4.1

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


www.google-analytics.com	/analytics.js	https://www.google-analytics.com/analytics.js
jquery.com	-	https://jquery.com/
sizzlejs.com	-	https://sizzlejs.com/
jquery.org	/license	https://jquery.org/license
github.com	/whatwg/html/issues/2369	https://github.com/whatwg/html/issues/2369
html.spec.whatwg.org	-	https://html.spec.whatwg.org/#nonce-attributes
js.foundation	-	https://js.foundation/
jsperf.com	/thor-indexof-vs-for/5	https://jsperf.com/thor-indexof-vs-for/5
www.w3.org	/TR/css3-selectors/	http://www.w3.org/TR/css3-selectors/#whitespace
www.w3.org	/TR/CSS21/syndata.html	http://www.w3.org/TR/CSS21/syndata.html#value-def-identifier

Showing 1 to 10 of 70 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


2.3.3.3	IPv4	-
2.3.3.1	IPv4	-

4.2 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

This is not working.

Janos Vajda·15 Nov 2021

Everything works according to the description. Tried his job, quite a good extension.

Robert Fotis·9 Nov 2021

Literally doesn't block sites added to the URL

Mark Davis·9 Nov 2021

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Easy site blocker

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 3 Versions3

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Growth

Rating Count

Average Rating

User Reviews