Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: EZ Blocker - Easy Ad Blocker

CRITICAL RISKRemoved from Chrome Web Store

EZ Blocker - Easy Ad Blocker

ID: ojnohcpmjmfginbfdpedmbaoaeockgno

Could be malicious

Supported Languages

🇧🇷Brazilian Portuguese

🇩🇰Danish

🇳🇱Dutch

🇺🇸English

🇫🇷French

🇩🇪German

🇮🇹Italian

🇪🇸Spanish

🇸🇪Swedish

Extension Info & Metadata

Status

Removed

Version

2024.11.19.18

Size

0.02 MB

Rating

4.2/5

Reviews

Users

80,000

Type

Extension

Updated

Dec 4, 2024

Publisher Contextual Analysis

Author: https://ezadblocker.siteView Profile
Privacy: Privacy Policy
Help: Help Center
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes
Website: Visit

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

80,000

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Easy to use Ad blocker that do not get detected by Youtube

⭐ Easy to use Ad blocker, nothing to configure, it just works. 🚫 Blocks and automatically closes most annoying popup advertisements. 🥷 Not detected by (Youtube) anti-adblock script. For the full list or urls that we block, you can consult our official page: ezadblocker.site Why EZ Blocker and not ublock (or other ad blocker) ? Because almost all other popup blocker are detected as Ad blockers. Youtube now blocks ad blockers and many other sites as well. EZ Blocker is not detected on Youtube. To better understand which websites we need to block, we record anonymous data about your browsing, keeping only the top level domain (never the full url) and a maximum of 50 per user. ✓ Permissions: Default permissions is required on every website to effectively block ads and close popup advertisement. 🚀 About We monitor new urls of ad networks 24/7 and add them to our list every day. If you find that an ad or popup is not blocked, just wait 24h, it should be solved. Change log : 2024.11.19 : Removed remote updating of scripts. 2024.10.23 : Moved scripts into local files directly into local storage upon install. Updated blocking list.

User Growth

Showing data from Dec 11, 2023 to Dec 17, 2024

Versions

-20%(-20,000 users)

Compared to 4 months ago

3 versions released in this period

Rating Count

Total: 94 ratings

Average Rating

Current: 4.20 / 5.0+4.20

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical4

High4

Medium1

Low0

Versions scanned

Showing 1 of 3 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1.0.18 Code review	9

Extension Version	Code Review Findings
1.0.18	9

Files with findings

2 distinct paths — top paths by unique finding count:

servwo.js8
contser.js1

S.No.	Category	Severity	File	Summary	Found in Version
1	Network Interception	critical	servwo.js (line 522)	A list of domains is fetched from ezblocker.net/ezblockerredirectblock.php and installed as a dynamic declarativeNetRequest rule that redirects any main_frame navigation matching ^http.+ on those domains to chrome-ext…	1.0.18
2	Network Interception	critical	servwo.js (line 551)	Arbitrary declarativeNetRequest rules are downloaded from ezblocker.net/ezblockercustomrules.php and applied verbatim via updateDynamicRules(addRules: h). Because the server supplies the entire rule object (conditions…	1.0.18
3	Remote Code Loading	critical	servwo.js (line 452)	The extension reads a script body string from chrome.storage.local (keyed by the visited site's hostname, e.g. 'google', 'youtube') and injects it into the page's MAIN world via a dynamically created <script> tag. The…	1.0.18
4	Remote Code Loading	critical	servwo.js (line 410)	The remote endpoint ezblocker.net/ezblockerjson.php returns arbitrary key/value pairs that are written straight into chrome.storage.local and chrome.storage.sync. Values written to local are later used as the injected…	1.0.18
5	Data Exfiltration	high	servwo.js (line 585)	Every time the extension runs, it serializes the entire chrome.storage.sync object (including the server-assigned syncuid, per-site ad counters, popad counts, and any other state) into query-string parameters and regi…	1.0.18
6	Privilege Escalation	high	servwo.js (line 605)	On install, the extension enumerates every open tab and silently closes any tab pointing at the Chrome Web Store or Microsoft Edge Add-ons detail pages. This obstructs users from viewing extension listings (where rati…	1.0.18
7	Tracking	high	servwo.js (line 478)	The background worker counts per-search-engine visits (google, youtube, bing, search.yahoo) and, via a(1), immediately forces a sync with ezblocker.net carrying those counters and a stable syncuid. This constitutes pe…	1.0.18
8	Tracking	high	contser.js (line 8)	A document_start content script on <all_urls> watches for DevTools/view-source shortcuts (F12, Ctrl+Shift+I/J/C, Ctrl+U, Cmd+Opt+I/J/C/U) and, on match, reports the current hostname back to the service worker, which i…	1.0.18
9	Tracking	medium	servwo.js (line 385)	On first run the extension calls b('uid', '') to obtain a server-assigned syncuid from ezblocker.net, then on every subsequent sync sends the entire chrome.storage.sync object (as URL params) together with that stable…	1.0.18

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


${api_domain}	/ezblockerjson35.php%60;	https://${API_DOMAIN}/ezblockerjson35.php`;
${api_domain}	/uninstallform.php%60;	https://${API_DOMAIN}/uninstallform.php`;
clients2.google.com	/service/update2/crx	https://clients2.google.com/service/update2/crx

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


35.227.234.222	IPv4	-

5.0 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

everyone's choice

Conor Holmes·6 Nov 2024

Amazing! Very Helpful tool

Aisha Ricks·1 Nov 2024

fonctionne jusqu'à présent ..

Agafon Dalton·29 Oct 2024

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

EZ Blocker - Easy Ad Blocker

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 3 Versions9

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating