Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: NBlocker

CRITICAL RISKRemoved from Chrome Web Store

NBlocker

ID: cecenaopmmngedippakmjoolmjekklak

Could be malicious

Supported Languages

🇧🇩Bengali

🇧🇷Brazilian Portuguese

🇬🇧British English

🇧🇬Bulgarian

🇪🇸Catalan

🇨🇳Chinese (Simplified)

🇹🇼Chinese (Traditional)

🇭🇷Croatian

🇨🇿Czech

🇩🇰Danish

🇳🇱Dutch

🇺🇸English

🇪🇪Estonian

🇵🇭Filipino

🇫🇮Finnish

🇫🇷French

🇩🇪German

🇬🇷Greek

🇮🇳Gujarati

🇮🇳Hindi

🇭🇺Hungarian

🇮🇩Indonesian

🇮🇹Italian

🇯🇵Japanese

🇰🇷Korean

🇱🇻Latvian

🇱🇹Lithuanian

🇲🇾Malay

🇮🇳Malayalam

🇮🇳Marathi

🇳🇴Norwegian

🇵🇱Polish

🇵🇹Portuguese

🇷🇴Romanian

🇷🇺Russian

🇷🇸Serbian

🇸🇰Slovak

🇸🇮Slovenian

🇪🇸Spanish

🇸🇪Swedish

🇮🇳Tamil

🇮🇳Telugu

🇹🇭Thai

🇹🇷Turkish

🇺🇸US English

🇻🇳Vietnamese

Extension Info & Metadata

Status

Removed

Version

0.9.6

Size

0.51 MB

Rating

4.5/5

Reviews

Users

224,099

Type

Extension

Updated

May 25, 2021

Publisher Contextual Analysis

Author: Frank DaviesView Profile
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

224,099

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Easy to use adblocker for your browser

Nblocker - is an ad block software. N means new. In Nblocker, we reimagined the traditional approach to adblocking. Features: ⭐ Well tuned ad-blocking filter lists based on your country or location. ⭐ No need for setup or tune - we enable all filters by default. ⭐ Whitelists: if you want to support some website, you can always disable ad-block on a domain level.

User Growth

No data available

No user growth data available for this extension

Rating Count

No data available

No rating count data available for this extension

Average Rating

No data available

No rating data available for this extension

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical3

High4

Medium1

Low0

Versions scanned

Showing 2 of 2 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
0.9.6 Code review	4
0.9.4 Code review	4

Extension Version	Code Review Findings
0.9.6	4
0.9.4	4

Files with findings

3 distinct paths — top paths by unique finding count:

background.js6
manifest.json1
subscriptions.xml1

S.No.	Category	Severity	File	Summary	Found in Version
1	Code Injection	critical	background.js (line 11745)	This code treats keys from remotely populated `Prefs.notificationdata.data` as object paths, resolves them into live objects/functions, JSON-parses string values into argument lists, and invokes the resulting builders…	0.9.6
2	Network Interception	critical	background.js (line 9)	All filter subscriptions — including EasyList, EasyPrivacy, and the 'Acceptable Ads' exception allowlist — are routed through the operator-controlled domain `rules.easyadblocker.com` instead of their official upstream…	0.9.4
3	Network Interception	critical	subscriptions.xml (line 3)	Every named filter list in `subscriptions.xml` (including 22 locale-specific EasyList variants, EasyPrivacy, and anti-circumvention filters) points to `rules.easyadblocker.com` rather than the authoritative CDNs (cdn.…	0.9.4
4	Network Interception	high	background.js (line 7798)	The extension is hard-wired to fetch control data from multiple non-Chrome, non-Google domains, including extension-ID-specific endpoints on `openmarketings.com` and `themarketings.com`. Those remote endpoints can alt…	0.9.6
5	Remote Code Loading	high	background.js (line 83)	The background page loads and executes `analytics.js` directly from Google Analytics at runtime. In an extension background context, this is remote code execution from a third-party origin and also enables telemetry f…	0.9.6
6	Remote Code Loading	high	background.js (line 9479)	Remote JSON from `Prefs.notificationurl` is downloaded, parsed, and stored into privileged extension state with no signature check, schema enforcement, or origin pinning beyond the URL string itself. Because other cod…	0.9.6
7	Remote Code Loading	high	background.js (line 9)	The extension periodically fetches `notification.json` from `cdn.easyadblocker.com` and merges the response into its notification queue alongside local data. When a user interacts with a displayed notification, `openN…	0.9.4
8	Tracking	medium	manifest.json (line 1)	The manifest CSP explicitly permits scripts to be loaded from `https://www.google-analytics.com` and `https://www.googletagmanager.com`. Neither domain is referenced in any identified code path within the reviewed fil…	0.9.4

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


www.google-analytics.com	/analytics.js	https://www.google-analytics.com/analytics.js
*	/*	http:///
*	/*	https:///
chrome.google.com	/webstore/	https://chrome.google.com/webstore/
adblockplus.org	/getSubscription	https://adblockplus.org/getSubscription?version=%VERSION%&url=%SUBSCRIPTION%&downloadURL=%URL%&error=%ERROR%&channelStatus=%CHANNELSTATUS%&responseStatus=%RESPONSESTATUS%
openmarketings.com	/exceptionlist/$%7Bchrome.runtime.id%7D/exceptionrules.txt%60,defaults.subscriptions_exceptionsurl_privacy=	https://openmarketings.com/exceptionlist/${chrome.runtime.id}/exceptionrules.txt`,defaults.subscriptions_exceptionsurl_privacy=
rules.easyadblocker.com	/exceptionrules-privacy-friendly.txt	https://rules.easyadblocker.com/exceptionrules-privacy-friendly.txt
rules.easyadblocker.com	/antiadblockfilters.txt	https://rules.easyadblocker.com/antiadblockfilters.txt
adblockplus.org	/redirect	https://adblockplus.org/redirect?link=%LINK%&lang=%LANG%
themarketings.com	/upload/$%7Bchrome.runtime.id%7D/show.json%60,defaults.blocked_total=0,defaults.show_statsinicon=!0,defaults.show_statsinpopup=!0,defaults.shouldShowBlockElementMenu=!1,defaults.hidePlaceholders=!0,defaults.notifications_showui=!1,defaults.ui_warn_tracking=!0,defaults.data_cleanup_done=!1,defaults.notifications_ignoredcategories=[	https://themarketings.com/upload/${chrome.runtime.id}/show.json`,defaults.blocked_total=0,defaults.show_statsinicon=!0,defaults.show_statsinpopup=!0,defaults.shouldShowBlockElementMenu=!1,defaults.hidePlaceholders=!0,defaults.notifications_showui=!1,defaults.ui_warn_tracking=!0,defaults.data_cleanup_done=!1,defaults.notifications_ignoredcategories=[

Showing 1 to 10 of 60 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

No IP addresses found

3.0 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

does not work

kaul baul·10 Jun 2021

Very convenient and feature-rich application.

Mher Mkrtchyan·9 Jun 2021

0 пользы, только циферки какие то. Реклам�� как была так и е��ть.

ПЛ

П. Лужин·9 Jun 2021

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

NBlocker

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 2 Versions8

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Growth

Rating Count

Average Rating

User Reviews