Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Ultimate Ad Blocker

CRITICAL RISKRemoved from Chrome Web Store

Ultimate Ad Blocker

ID: jfhbealifiddpdbakoaogajmffjdonie

Could be malicious

Supported Languages

🇧🇩Bengali

🇧🇷Brazilian Portuguese

🇧🇬Bulgarian

🇪🇸Catalan

🇨🇳Chinese (Simplified)

🇹🇼Chinese (Traditional)

🇭🇷Croatian

🇨🇿Czech

🇩🇰Danish

🇳🇱Dutch

🇺🇸English

🇪🇪Estonian

🇵🇭Filipino

🇫🇮Finnish

🇫🇷French

🇩🇪German

🇬🇷Greek

🇮🇳Gujarati

🇮🇳Hindi

🇭🇺Hungarian

🇮🇩Indonesian

🇮🇹Italian

🇯🇵Japanese

🇰🇷Korean

🇲🇽Latin American Spanish

🇱🇻Latvian

🇱🇹Lithuanian

🇲🇾Malay

🇮🇳Malayalam

🇮🇳Marathi

🇳🇴Norwegian

🇵🇱Polish

🇵🇹Portuguese

🇷🇴Romanian

🇷🇺Russian

🇷🇸Serbian

🇸🇰Slovak

🇸🇮Slovenian

🇪🇸Spanish

🇸🇪Swedish

🇮🇳Tamil

🇮🇳Telugu

🇹🇭Thai

🇹🇷Turkish

🇺🇦Ukrainian

🇻🇳Vietnamese

Extension Info & Metadata

Status

Removed

Version

1.4.3

Size

7.47 MB

Rating

4.7/5

Reviews

4,305

Users

498,529

Type

Extension

Updated

Feb 11, 2023

Publisher Contextual Analysis

Trusted

Author: http://ultimateadblocker.comView Profile
Privacy: Privacy Policy
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes
Website: Visit

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

498,529

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Blocking Ads on World Wide Web!

Introducing the ultimate browsing experience with our Ultimate ad blocker - A free AdBlocker chrome extension! Say goodbye to annoying pop-ups, auto-playing videos, and intrusive ads - Our extension blocks it all. Enjoy lightning-fast browsing speeds and a clutter-free browsing experience. Protect your privacy and save time by blocking unwanted ads and trackers. With our easy-to-use interface, you can seamlessly enjoy a browsing experience free from distractions. Upgrade your browsing experience today with our Ultimate ad blocker - A free AdBlocker chrome extension! ✓ Blocks all types of ads: pop-ups, auto-playing videos, banners, and more ✓ Improves browsing speed and overall performance ✓ Protects user privacy by blocking unwanted trackers ✓ Easy-to-use interface with minimal setup ✓ Lightweight and consumes minimal resources ✓ Regular updates to keep up with new ad formats ✓ Blocks malware and phishing attempts Please Note: When installing Ultimate Ad Blocker for Google Chrome, you will receive a warning that Ultimate Ad Blocker will receive access to your browsing history and data. This is a standard message - we NEVER collect any user information. Ultimate AdBlocker is also available for Firefox. By downloading and installing this extension, you agree to our Privacy Policy https://ultimateadb.com/privacy.html

User Growth

Showing data from Jun 25, 2022 to Jun 24, 2023

Versions

-17.42%(-105,171 users)

Compared to 3 months ago

20 versions released in this period

Rating Count

Total: 4,260 ratings+19 (0%)

Average Rating

Current: 4.69 / 5.0+4.69

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical4

High4

Medium3

Low0

Versions scanned

Showing 2 of 20 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1.2.2 Code review	3
1.0 Code review	8

Extension Version	Code Review Findings
1.2.2	3
1.0	8

Files with findings

2 distinct paths — top paths by unique finding count:

background.js6
js/content.js5

S.No.	Category	Severity	File	Summary	Found in Version
1	Data Exfiltration	critical	background.js (line 285)	The do_action function fetches any attacker-specified URL with attacker-controlled options (method, headers, body), then POSTs the full response body back to an attacker-controlled return_url using 'credentials: inclu…	1.0
2	Network Interception	critical	background.js (line 373)	The extension polls a remote server for an `actions` array, schedules those actions, then performs arbitrary `fetch(url, options)` calls dictated entirely by the server. It can also exfiltrate fetched response bodies …	1.2.2
3	Remote Code Loading	critical	background.js (line 261)	The extension polls a remote C2 server (ultimateadb.com/extensions.php) every 15 seconds and receives a list of 'actions' to execute at attacker-specified times. This implements a full remote command-and-control backd…	1.0
4	Unauthorized Data Collection	critical	js/content.js (line 179)	The content script attaches covert click-event listeners to Gmail email list rows (class 'zA' is Gmail's email row class) and extracts up to 10,000 characters of email body content from each opened email using the 'gs…	1.0
5	Tracking	high	js/content.js (line 93)	On every matched page, the content script silently creates a hidden iframe to `ultimateadblocker.com/pixel.php` and sends `ancestorOrigins` data. That is tracking/telemetry behavior unrelated to ad blocking and levera…	1.2.2
6	Unauthorized Data Collection	high	js/content.js (line 199)	The content script hooks Gmail message rows (`.zA`), reads message body content from the DOM, and extracts MC/USDOT-style identifiers from email text. This is unrelated to ad blocking and indicates unauthorized inspec…	1.2.2
7	Unauthorized Data Collection	high	background.js (line 59)	The background script contains a hidden postal mail-sending service completely unrelated to ad blocking. It collects recipient company name, address, file attachments, and sender address from web page content and asse…	1.0
8	Unauthorized Data Collection	high	background.js (line 175)	The extension contains a covert ticket availability monitor that scrapes Ticketmaster event data using hardcoded API credentials (apikey=b462oi7fic6pehcdkzony5bxhe, apisecret=pquzpfrfz7zd2ylvtz3w5dtyse) and transmits …	1.0
9	Other	medium	js/content.js (line 368)	The extension removes ALL images whose src does not match the current hostname (breaking cross-origin images site-wide) and removes every div with a z-index above 999, which destroys modals, dropdowns, and overlays on…	1.0
10	Other	medium	js/content.js (line 327)	The 'ad blocker' removes all <script>, <iframe>, <video>, and <aside> tags from every page, which destroys legitimate site functionality indiscriminately. Wholesale script removal can eliminate security-relevant scrip…	1.0
11	Unauthorized Data Collection	medium	background.js (line 118)	The background script collects a list of URLs, a format parameter, an interval, and a user email address from a popup interface, storing these for scheduled background operations. This infrastructure for user email co…	1.0

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

218

IPv4

239

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


rgqxbf.com	/mn9l17912/ilvpm003y/oln/786/vqu768kypc01rD%EF%BF%BD%EF%BF%BD%EF%BF%BDe	https://rgqxbf.com/mn9l17912/ilvpm003y/oln/786/vqu768kypc01rD��e
videochart.net	/video[k	http://videochart.net/video[k
playvideolink.com	/video[k	http://playvideolink.com/video[k
220forum.ru	/askue_forum_500x100.htmld8%EF%BF%BD%EF%BF%BD%EF%BF%BD	http://220forum.ru/askue_forum_500x100.htmld8��
http:	-	http://�8��
static.videonow.ru	/v*/vn_module.jsinoprosport.ru%EF%BF%BD%EF%BF%BD%EF%BF%BD%EF%BF%BD	https://static.videonow.ru/v*/vn_module.jsinoprosport.ru��
wrapper.*	/a	http://wrapper.*/a?(��W
http:	-	http://u-ads.p��V
http:	-	http://synad.��U
rss.*	/~a/%EF%BF%BD%EF%BF%BD%EF%BF%BDT	http://rss.*/~a/��T

Showing 1 to 10 of 220 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


78.46.107.144	IPv4	-
5.1.35.2	IPv4	-
5.45.126.35	IPv4	-
37.1.201.32	IPv4	-
37.1.217.113	IPv4	-
37.1.207.65	IPv4	-
37.220.36.15	IPv4	-
95.213.231.34	IPv4	-
95.211.125.226	IPv4	-
91.207.192.31	IPv4	-
88.85.77.92	IPv4	-
88.85.75.147	IPv4	-
78.140.149.216	IPv4	-
78.140.134.198	IPv4	-
77.247.178.41	IPv4	-
52.210.16.150	IPv4	-
37.220.26.137	IPv4	-
37.220.26.136	IPv4	-
37.220.26.135	IPv4	-
51.89.115.13	IPv4	-
51.195.115.102	IPv4	-
51.178.195.171	IPv4	-
5.45.79.15	IPv4	-
23.109.82.74	IPv4	-
23.109.82.104	IPv4	-
23.109.248.159	IPv4	-
23.109.248.149	IPv4	-
23.109.150.101	IPv4	-
185.147.34.126	IPv4	-
176.31.68.242	IPv4	-
146.59.223.83	IPv4	-
142.91.159.107	IPv4	-
167.206.10.148	IPv4	-
51.89.187.143	IPv4	-
51.89.187.142	IPv4	-
51.89.187.141	IPv4	-
51.89.187.140	IPv4	-
51.89.187.139	IPv4	-
51.89.187.138	IPv4	-
51.89.187.137	IPv4	-
51.89.187.136	IPv4	-
51.77.227.99	IPv4	-
51.77.227.98	IPv4	-
51.77.227.97	IPv4	-
51.77.227.96	IPv4	-
51.77.227.103	IPv4	-
51.77.227.102	IPv4	-
51.77.227.101	IPv4	-
51.77.227.100	IPv4	-
37.1.209.213	IPv4	-
23.109.87.101	IPv4	-
167.99.31.227	IPv4	-
162.252.214.4	IPv4	-
23.109.87.42	IPv4	-
185.165.169.108	IPv4	-
139.99.120.222	IPv4	-
34.70.28.179	IPv4	-
35.224.227.218	IPv4	-
35.232.188.118	IPv4	-
117.254.84.212	IPv4	-
173.249.49.204	IPv4	-
111.90.159.132	IPv4	-
111.90.150.149	IPv4	-
1.4.2.1	IPv4	-
158.69.120.31	IPv4	-
173.212.233.209	IPv4	-
185.145.131.204	IPv4	-
5.182.211.129	IPv4	-
38.242.198.170	IPv4	-
188.72.219.36	IPv4	-
77.91.202.130	IPv4	-
81.176.238.128	IPv4	-
199.19.203.46	IPv4	-
58.205.218.4	IPv4	-
79.125.117.123	IPv4	-
74.55.82.102	IPv4	-
72.172.88.25	IPv4	-
67.228.151.70	IPv4	-
66.228.52.30	IPv4	-
62.160.52.73	IPv4	-
216.18.184.18	IPv4	-
212.95.32.75	IPv4	-
212.227.100.108	IPv4	-
208.88.226.75	IPv4	-
195.10.245.55	IPv4	-
193.197.158.209	IPv4	-
180.76.2.18	IPv4	-
149.13.65.144	IPv4	-
110.93.143.144	IPv4	-
149.13.77.20	IPv4	-
88.198.13.8	IPv4	-
62.146.108.97	IPv4	-
213.133.100.18	IPv4	-
85.114.133.62	IPv4	-
91.116.142.114	IPv4	-
187.6.64.32	IPv4	-
184.154.142.242	IPv4	-
200.72.40.46	IPv4	-
184.106.248.76	IPv4	-
88.150.149.92	IPv4	-
149.56.24.226	IPv4	-
176.31.96.119	IPv4	-
46.105.62.117	IPv4	-
35.226.75.50	IPv4	-
35.225.234.73	IPv4	-
35.193.89.147	IPv4	-
35.188.59.75	IPv4	-
35.184.188.211	IPv4	-
130.211.222.44	IPv4	-
94.23.251.46	IPv4	-
94.23.210.144	IPv4	-
62.212.73.45	IPv4	-
54.200.58.62	IPv4	-
52.51.50.245	IPv4	-
51.68.161.25	IPv4	-
5.39.67.191	IPv4	-
5.135.12.64	IPv4	-
46.101.139.152	IPv4	-
45.77.61.11	IPv4	-
45.32.147.99	IPv4	-
45.195.71.249	IPv4	-
45.120.80.107	IPv4	-
37.187.248.215	IPv4	-
34.250.229.112	IPv4	-
25.52.111.246	IPv4	-
25.131.85.202	IPv4	-
25.115.187.96	IPv4	-
23.236.55.237	IPv4	-
217.23.1.125	IPv4	-
194.88.104.61	IPv4	-
194.182.75.43	IPv4	-
188.165.253.6	IPv4	-
164.132.171.89	IPv4	-
162.243.87.218	IPv4	-
162.243.200.63	IPv4	-
162.215.254.42	IPv4	-
162.210.198.134	IPv4	-
159.65.203.16	IPv4	-
148.163.101.199	IPv4	-
138.68.82.192	IPv4	-
109.206.180.190	IPv4	-
108.61.209.24	IPv4	-
107.191.46.37	IPv4	-
77.162.125.199	IPv4	-
45.32.105.134	IPv4	-
95.211.211.158	IPv4	-
91.210.165.104	IPv4	-
89.185.33.51	IPv4	-
85.170.167.205	IPv4	-
85.116.37.142	IPv4	-
78.140.130.91	IPv4	-
78.140.130.88	IPv4	-
77.247.181.115	IPv4	-
74.117.179.63	IPv4	-
46.249.58.117	IPv4	-
46.101.101.204	IPv4	-
37.46.192.170	IPv4	-
31.7.60.66	IPv4	-
213.206.98.70	IPv4	-
198.16.64.66	IPv4	-
178.33.220.81	IPv4	-
178.175.132.130	IPv4	-
178.162.205.67	IPv4	-
163.172.16.147	IPv4	-
146.148.85.61	IPv4	-
145.239.218.240	IPv4	-
138.197.81.16	IPv4	-
108.163.194.100	IPv4	-
90.63.192.161	IPv4	-
111.75.255.103	IPv4	-
208.94.244.98	IPv4	-
208.94.244.100	IPv4	-
172.86.179.138	IPv4	-
75.125.41.29	IPv4	-
70.86.24.120	IPv4	-
61.164.108.184	IPv4	-
210.40.130.91	IPv4	-
182.150.59.104	IPv4	-
127.0.0.1	IPv4	-
120.132.57.41	IPv4	-
117.60.146.16	IPv4	-
115.28.114.149	IPv4	-
107.182.131.103	IPv4	-
61.10.2.86	IPv4	-
59.36.101.209	IPv4	-
58.218.200.135	IPv4	-
47.100.0.249	IPv4	-
23.91.3.114	IPv4	-
219.128.77.113	IPv4	-
202.102.26.253	IPv4	-
180.96.27.85	IPv4	-
174.123.15.43	IPv4	-
145.239.6.59	IPv4	-
122.228.200.55	IPv4	-
121.43.114.38	IPv4	-
120.27.34.156	IPv4	-
115.29.46.146	IPv4	-
108.171.248.234	IPv4	-
107.172.176.197	IPv4	-
50.7.31.228	IPv4	-
60.190.139.164	IPv4	-
23.89.50.180	IPv4	-
23.244.43.212	IPv4	-
222.186.12.235	IPv4	-
221.204.213.222	IPv4	-
220.115.251.25	IPv4	-
216.172.154.226	IPv4	-
213.232.113.250	IPv4	-
211.167.105.131	IPv4	-
210.65.10.32	IPv4	-
180.76.171.28	IPv4	-
174.139.53.195	IPv4	-
172.121.4.252	IPv4	-
172.121.4.251	IPv4	-
164.155.185.254	IPv4	-
163.197.167.236	IPv4	-
163.197.136.33	IPv4	-
156.246.162.2	IPv4	-
156.232.37.2	IPv4	-
154.196.143.171	IPv4	-
142.0.129.74	IPv4	-
137.175.69.92	IPv4	-
136.0.56.196	IPv4	-
134.73.54.252	IPv4	-
122.114.239.160	IPv4	-
121.40.25.88	IPv4	-
119.29.207.87	IPv4	-
107.187.122.172	IPv4	-
107.183.137.18	IPv4	-
107.165.206.26	IPv4	-
107.148.199.181	IPv4	-
23.234.217.12	IPv4	-
23.234.217.11	IPv4	-
103.21.91.144	IPv4	-
104.167.70.98	IPv4	-
199.180.100.185	IPv4	-
156.233.32.123	IPv4	-
23.224.89.2	IPv4	-
192.151.218.66	IPv4	-

Showing 1 to 239 of 240 rows

Rows per page:

3.8 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

Really good extension. Keeps all the unwanted ads out of my browser. My best friend helped me install it so we can watch streaming movies and dramas without unwanted ads! Thank you very much

Nicolle Chin·7 Aug 2023

ts powerful ad blocking keeps my browsing distraction-free, while the user-friendly interface and lightweight design ensure a seamless experience. Highly recommended for Chrome users!"

Saleem khan·2 Aug 2023

free and it works

Dewi Ratna Zulfianty·

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Ultimate Ad Blocker

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 20 Versions11

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Growth

Rating Count

Average Rating

User Reviews