Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Global Ad Blocker

CRITICAL RISKRemoved from Chrome Web Store

Global Ad Blocker

ID: eklanaffifkpfdpnkngfilpcgodfdimb

Could be malicious

Supported Languages

🇧🇷Brazilian Portuguese

🇩🇰Danish

🇳🇱Dutch

🇺🇸English

🇫🇮Finnish

🇫🇷French

🇩🇪German

🇮🇹Italian

🇳🇴Norwegian

🇪🇸Spanish

🇸🇪Swedish

Extension Info & Metadata

Status

Removed

Version

2.0.7

Size

1.08 MB

Rating

3.7/5

Reviews

126

Users

300,000

Type

Extension

Updated

Mar 27, 2024

Publisher Contextual Analysis

Author: https://globaladblocker.comView Profile
Privacy: Privacy Policy
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes
Website: Visit

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

300,000

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Ad blocking software using powerful net request filtering technology.

Global Ad Blocker extension blocks many types of ads like banners, overlay and video ads. You can choose to disable the ad blocking feature on any site you want by clicking on the extension icon. Filters lists are regularly updated to achieve an excellent ad free experience.

User Growth

Showing data from Apr 13, 2023 to Apr 11, 2024

Versions

-5.29%(-16,760 users)

Compared to 3 months ago

7 versions released in this period

Rating Count

Total: 47 ratings+13 (38%)

Average Rating

Current: 3.72 / 5.0-0.92

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical3

High5

Medium4

Low0

Versions scanned

Showing 2 of 7 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
2.0.5 Code review	7
2.0.2 Code review	5

Extension Version	Code Review Findings
2.0.5	7
2.0.2	5

Files with findings

2 distinct paths — top paths by unique finding count:

sw.js11
cs/yt-cs.js1

S.No.	Category	Severity	File	Summary	Found in Version
1	Code Injection	critical	sw.js (line 329)	This executes scripts directly in the page's MAIN world on arbitrary tabs and frames. Combined with the remotely refreshed `js__<domain>` data loaded elsewhere in the worker, the server can choose which scriptlets run…	2.0.2
2	Network Interception	critical	sw.js (line 381)	Server-fetched `netRules` (obtained via `updateFiltersItem`) are merged with local whitelist rules and applied as live `declarativeNetRequest` dynamic rules with no validation or sanitization. An attacker controlling …	2.0.5
3	Remote Code Loading	critical	sw.js (line 76)	The extension fetches arbitrary filter items from a remote server (globaladblocker.com) and, when the item type is 'net', stores the response as `netRules` and immediately applies them as `declarativeNetRequest` dynam…	2.0.5
4	Network Interception	high	sw.js (line 420)	The extension replaces its dynamic declarativeNetRequest ruleset with data stored in `netRules`, which is populated from the remote server. That gives the backend the ability to change request blocking/allowing behavi…	2.0.2
5	Other	high	cs/yt-cs.js (line 107)	The YouTube content script contains a `mAsWtchd` (mark as watched) function that parses YouTube's internal `ytInitialPlayerResponse` JSON blob from page `<script>` tags, extracts the `videostatsPlaybackUrl`, and fires…	2.0.5
6	Remote Code Loading	high	sw.js (line 109)	The `/yt-state/` endpoint allows the remote server to remotely unregister the YouTube content script for specific users (via `yt_cs_is_canceled`) without pushing any extension update. This is a hidden remote kill-swit…	2.0.5
7	Remote Code Loading	high	sw.js (line 128)	The extension pulls rule payloads from a remote server and stores them locally without any visible integrity validation or allowlist of expected fields. Those server-controlled payloads later drive page modifications …	2.0.2
8	Tracking	high	sw.js (line 174)	On installation the extension contacts the remote server to receive a server-assigned `userId`, which is immediately stored in `chrome.storage.sync` — meaning it silently syncs across all of the user's Chrome profiles…	2.0.5
9	Tracking	medium	sw.js (line 227)	A delayed alarm (`alarmCompleateInstallation`) fires after a server-specified `endDelay` minutes and calls the `/end/` endpoint with the userId, acting as a deferred install-completion tracking beacon. A second recurr…	2.0.5
10	Tracking	medium	sw.js (line 212)	The extension provisions a persistent server-side `userId`, stores it in sync storage, and sends it on install and uninstall beacons. This creates durable per-user tracking tied to extension lifecycle events, which is…	2.0.2
11	Unauthorized Data Collection	medium	sw.js (line 40)	Every runtime error is reported to `globaladblocker.com/error/` including the `extensionId`, `version`, error stack trace, and `cachedUserId`. While error reporting is common, bundling the persistent user tracking ID …	2.0.5
12	Unauthorized Data Collection	medium	sw.js (line 97)	The worker uploads error messages and stack traces to the vendor backend together with the persistent user identifier. Stack traces can contain sensitive runtime details, and this telemetry channel is broad enough to …	2.0.2

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

176

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


github.com	/AdguardTeam/ExtendedCss	https://github.com/AdguardTeam/ExtendedCss
www.apache.org	/licenses/LICENSE-2.0	http://www.apache.org/licenses/LICENSE-2.0
developer.mozilla.org	/en/JavaScript/Reference/Global_Objects/regexp	https://developer.mozilla.org/en/JavaScript/Reference/Global_Objects/regexp
github.com	/AdguardTeam/FingerprintingBlocker/blob/master/src/shared/url.ts	https://github.com/AdguardTeam/FingerprintingBlocker/blob/master/src/shared/url.ts#L64
github.com	/ariya/phantomjs/issues/14832	https://github.com/ariya/phantomjs/issues/14832
github.com	/kriskowal/asap/blob/master/browser-raw.js	https://github.com/kriskowal/asap/blob/master/browser-raw.js#L140}
github.com	/Polymer/WeakMap%7D	https://github.com/Polymer/WeakMap}
docs.microsoft.com	/en-us/scripting/javascript/reference/set-object-javascript%7D	https://docs.microsoft.com/en-us/scripting/javascript/reference/set-object-javascript}
sizzlejs.com	-	https://sizzlejs.com/
js.foundation	-	https://js.foundation/

Showing 1 to 10 of 90 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


91.116.142.114	IPv4	-
184.154.142.242	IPv4	-
187.6.64.32	IPv4	-
52.210.16.150	IPv4	-
37.1.217.113	IPv4	-
37.1.207.65	IPv4	-
5.45.126.35	IPv4	-
78.46.107.144	IPv4	-
90.63.192.161	IPv4	-
46.105.62.117	IPv4	-
176.31.96.119	IPv4	-
213.133.100.18	IPv4	-
62.146.108.97	IPv4	-
88.198.13.8	IPv4	-
149.13.77.20	IPv4	-
185.145.131.204	IPv4	-
158.69.120.31	IPv4	-
1.4.2.1	IPv4	-
111.90.150.149	IPv4	-
111.90.159.132	IPv4	-
35.232.188.118	IPv4	-
35.224.227.218	IPv4	-
34.70.28.179	IPv4	-
139.99.120.222	IPv4	-
23.109.248.125	IPv4	-
203.195.121.119	IPv4	-
142.91.159.220	IPv4	-
23.109.248.135	IPv4	-
23.109.87.213	IPv4	-
188.42.84.162	IPv4	-
23.109.87.101	IPv4	-
172.255.6.152	IPv4	-
142.91.159.136	IPv4	-
172.255.6.199	IPv4	-
162.252.214.4	IPv4	-
203.195.121.134	IPv4	-
203.195.121.72	IPv4	-
88.42.84.136	IPv4	-
203.195.121.73	IPv4	-
203.195.121.24	IPv4	-
203.195.121.28	IPv4	-
23.109.248.139	IPv4	-
203.195.121.36	IPv4	-
142.91.159.164	IPv4	-
23.109.248.149	IPv4	-
51.89.187.139	IPv4	-
23.109.82.173	IPv4	-
188.42.84.23	IPv4	-
172.255.6.2	IPv4	-
51.77.227.99	IPv4	-
51.89.187.138	IPv4	-
23.109.82.44	IPv4	-
23.109.248.174	IPv4	-
142.91.159.146	IPv4	-
23.109.248.130	IPv4	-
172.255.6.248	IPv4	-
158.247.208.115	IPv4	-
184.106.248.76	IPv4	-
23.109.82.202	IPv4	-
23.109.87.71	IPv4	-
203.195.121.40	IPv4	-
142.91.159.127	IPv4	-
23.109.87.55	IPv4	-
51.77.227.100	IPv4	-
51.77.227.97	IPv4	-
172.255.6.135	IPv4	-
172.255.6.228	IPv4	-
142.91.159.169	IPv4	-
203.195.121.103	IPv4	-
23.109.248.14	IPv4	-
23.109.87.47	IPv4	-
117.254.84.212	IPv4	-
203.195.121.1	IPv4	-
203.195.121.74	IPv4	-
142.91.159.223	IPv4	-
23.109.248.129	IPv4	-
23.109.150.253	IPv4	-
23.109.87.14	IPv4	-
172.255.6.59	IPv4	-
203.195.121.209	IPv4	-
23.109.87.192	IPv4	-
23.109.87.182	IPv4	-
51.77.227.103	IPv4	-
23.109.87.139	IPv4	-
203.195.121.195	IPv4	-
23.109.248.29	IPv4	-
51.77.227.101	IPv4	-
203.195.121.70	IPv4	-
23.109.87.45	IPv4	-
142.91.159.150	IPv4	-
203.195.121.219	IPv4	-
167.206.10.148	IPv4	-
188.42.84.159	IPv4	-
51.89.187.140	IPv4	-
37.1.209.213	IPv4	-
51.77.227.96	IPv4	-
51.77.227.102	IPv4	-
23.109.150.208	IPv4	-
203.195.121.217	IPv4	-
172.255.6.137	IPv4	-
172.255.6.150	IPv4	-
51.89.187.141	IPv4	-
203.195.121.11	IPv4	-
172.255.6.139	IPv4	-
51.89.187.137	IPv4	-
23.109.87.42	IPv4	-
23.109.87.217	IPv4	-
203.195.121.46	IPv4	-
23.109.248.183	IPv4	-
203.195.121.224	IPv4	-
142.91.159.139	IPv4	-
142.91.159.179	IPv4	-
203.195.121.29	IPv4	-
23.109.87.127	IPv4	-
203.195.121.229	IPv4	-
51.89.187.136	IPv4	-
188.42.84.21	IPv4	-
34.102.137.201	IPv4	-
23.109.248.229	IPv4	-
142.91.159.147	IPv4	-
23.109.87.123	IPv4	-
167.99.31.227	IPv4	-
23.109.248.247	IPv4	-
23.109.248.20	IPv4	-
23.109.82.119	IPv4	-
23.109.87.118	IPv4	-
203.195.121.0	IPv4	-
172.255.6.140	IPv4	-
51.77.227.98	IPv4	-
203.195.121.184	IPv4	-
51.89.187.142	IPv4	-
23.109.87.74	IPv4	-
188.42.84.110	IPv4	-
51.89.187.143	IPv4	-
23.83.114.131	IPv4	-
142.91.159.201	IPv4	-
188.42.84.160	IPv4	-
188.42.84.137	IPv4	-
172.255.6.254	IPv4	-
23.195.91.195	IPv4	-
142.91.159.244	IPv4	-
188.72.219.36	IPv4	-
172.255.6.252	IPv4	-
203.195.121.34	IPv4	-
78.140.149.216	IPv4	-
95.211.125.226	IPv4	-
77.247.178.41	IPv4	-
88.85.77.92	IPv4	-
213.206.98.70	IPv4	-
88.85.75.147	IPv4	-
91.207.192.31	IPv4	-
200.72.40.46	IPv4	-
78.140.134.198	IPv4	-
85.114.133.62	IPv4	-
37.220.26.135	IPv4	-
37.220.26.137	IPv4	-
37.220.26.136	IPv4	-
23.109.82.104	IPv4	-
143.244.184.39	IPv4	-
51.178.195.171	IPv4	-
142.91.159.107	IPv4	-
51.195.115.102	IPv4	-
5.45.79.15	IPv4	-
23.109.87.15	IPv4	-
23.109.82.222	IPv4	-
185.147.34.126	IPv4	-
23.109.82.74	IPv4	-
172.255.103.171	IPv4	-
188.42.84.199	IPv4	-
176.31.68.242	IPv4	-
146.59.223.83	IPv4	-
23.109.150.101	IPv4	-
51.89.115.13	IPv4	-
62.212.73.45	IPv4	-
198.16.64.66	IPv4	-
185.165.169.108	IPv4	-

Showing 1 to 176 of 180 rows

Rows per page:

3.1 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

no me deja ver mis peliculas tranquilo ya me harta por que tenemos que hacer esto ya hice varias veces y nada

Samir Mamani·28 May 2024

entonced?

Fundacion Komuya·26 May 2024

Muy buena la App la utilizo para dañar relaciones😹😹

Luis Mateus·24 May 2024

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Global Ad Blocker

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 7 Versions12

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating