Security Alert: Confirmed Malware

This extension was removed from the Chrome Web Store as malware. Do not install it.Extension: Ultimate Video Adblocker

CRITICAL RISKRemoved from Chrome Web Store

Ultimate Video Adblocker

ID: onpmkedanliikncfkonkaicicjmkadkh

Could be malicious

Supported Languages

🇫🇷French

🇩🇪German

🇮🇹Italian

🇪🇸Spanish

🇺🇸US English

Extension Info & Metadata

Status

Removed

Version

1.1.2

Size

0.76 MB

Rating

4.5/5

Reviews

163

Users

200,000

Type

Extension

Updated

Apr 28, 2021

Publisher Contextual Analysis

Trusted

Author: ultimateadblockerView Profile
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes

Total Extensions

Active

Obsolete

Listed

Unlisted

Total Users

200,000

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Hide annoying ads on youtube and other popular video services

Ultimate Video Adblocker is a free extension for deleting advertising on video sites. Say no to annoying ads! Main advantages: - Blocking all kinds of ads (no popups and built-in videos). - Accelerating the browser by reducing downloaded traffic - Accelerate interaction with sites (no blocking ads) * For the extension work needs standard permissions to work with the web page for removing advertising blocks, built-in videos, etc.

User Growth

Showing data from Jan 01, 2022 to Jun 30, 2022

Versions

+100%(+100,000 users)

Compared to 3 months ago

1 version released in this period

Rating Count

Total: 163 ratings+1 (1%)

Average Rating

Current: 4.51 / 5.0-0.05

Extracted Data

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

By severity

Critical2

High4

Medium2

Low0

Versions scanned

Showing 1 of 4 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension Version	Code Review Findings
1.0.0 Code review	8

Extension Version	Code Review Findings
1.0.0	8

Files with findings

1 distinct path — top paths by unique finding count:

js/background.js8

S.No.	Category	Severity	File	Summary	Found in Version
1	Remote Code Loading	critical	js/background.js (line 10559)	The extension fetches its filter list configuration from the remote server at api.video-adblock.com/config, and then uses a server-provided URL (config.genericListUrl) to determine where to load its filter rules from.…	1.0.0
2	Tracking	critical	js/background.js (line 10551)	Every time the user navigates to a supported tab, the extension reports the visited domain along with a persistent user identifier (uid) and an affiliate subid to the remote server at api.video-adblock.com. This const…	1.0.0
3	Obfuscation	high	js/background.js (line 10475)	All API calls to api.video-adblock.com are routed through hidden iframes rather than direct fetch() calls. This is a deliberate obfuscation technique to bypass browser CORS restrictions and evade network inspection. T…	1.0.0
4	Tracking	high	js/background.js (line 10075)	On first run, the extension generates a persistent UUID (clientId) and stores it in extension storage indefinitely. This identifier is passed to the remote server on every domain lookup (api.loadDomains call with appS…	1.0.0
5	Unauthorized Data Collection	high	js/background.js (line 10375)	The extension covertly probes which other extensions are installed by creating hidden background tabs that point to internal chrome-extension:// URLs of target extensions and then attempting CSS injection. A successfu…	1.0.0
6	Unauthorized Data Collection	high	js/background.js (line 10442)	For Firefox targets, the extension calls chrome.management.getAll() which returns the full list of every installed extension in the browser. This API requires the 'management' permission and exposes the complete insta…	1.0.0
7	Tracking	medium	js/background.js (line 10143)	On installation, the extension immediately fires a conversion tracking request to https://video-adblock.com/conversion (via iframeFetch). It also closes any popup tabs pointing to the Chrome Web Store listing or the e…	1.0.0
8	Tracking	medium	js/background.js (line 10123)	The extension actively monitors Chrome Web Store tabs to harvest affiliate 'subid' parameters from URLs and persists them in extension storage. This subid is subsequently appended to all API requests made to api.video…	1.0.0

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

URLs

479

IPv4

IPv6

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


clients2.google.com	/service/update2/crx	https://clients2.google.com/service/update2/crx
*	/*	http:///
*	/*	https:///
fonts.googleapis.com	/css2	https://fonts.googleapis.com/css2?family=Poppins:wght@400;500&display=swap
www.w3.org	/2000/svg	http://www.w3.org/2000/svg
www.w3.org	/1999/xlink	http://www.w3.org/1999/xlink
avocode.com	-	https://avocode.com/
probablyprogramming.com	/2009/03/15/the-tiniest-gif-ever	http://probablyprogramming.com/2009/03/15/the-tiniest-gif-ever
www.iab.net	/videosuite/vmap	http://www.iab.net/videosuite/vmap
ubuntuforums.org	/showthread.php	https://ubuntuforums.org/showthread.php?t=1911430&p=11624471#post11624471

Showing 1 to 10 of 480 rows

Rows per page:

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.


2.0.65.59	IPv4	-
2.0.4.4	IPv4	-
2.0.0.29	IPv4	-
2.0.79.26	IPv4	-
2.0.1.82	IPv4	-
2.0.79.25	IPv4	-
2.0.3.78	IPv4	-
2.0.3.26	IPv4	-
2.0.1.33	IPv4	-
2.0.0.44	IPv4	-
2.0.79.24	IPv4	-
2.0.0.75	IPv4	-
2.0.79.3	IPv4	-
2.0.68.13	IPv4	-
2.0.0.5	IPv4	-
2.0.5.26	IPv4	-
2.0.0.63	IPv4	-
2.0.65.47	IPv4	-
2.0.65.49	IPv4	-
1.0.6.60	IPv4	-
2.0.0.34	IPv4	-
2.0.1.20	IPv4	-
2.0.6.72	IPv4	-
2.0.0.90	IPv4	-
2.0.74.54	IPv4	-
2.0.2.18	IPv4	-
2.0.79.1	IPv4	-
2.0.8.47	IPv4	-
2.0.4.18	IPv4	-
2.0.13.2	IPv4	-
2.0.4.8	IPv4	-
2.0.3.27	IPv4	-
2.0.16.82	IPv4	-
2.0.3.69	IPv4	-
2.0.3.84	IPv4	-
2.0.0.30	IPv4	-
2.0.0.25	IPv4	-
2.0.0.28	IPv4	-
2.0.3.39	IPv4	-
2.0.0.85	IPv4	-
2.0.1.31	IPv4	-
2.0.0.27	IPv4	-
2.0.11.49	IPv4	-
2.0.3.59	IPv4	-
2.0.0.54	IPv4	-
2.0.1.2	IPv4	-
1.0.19.44	IPv4	-
2.0.3.5	IPv4	-
2.0.0.37	IPv4	-
2.0.0.26	IPv4	-
2.0.67.27	IPv4	-
1.0.2.11	IPv4	-
2.0.9.54	IPv4	-
2.0.6.57	IPv4	-
2.0.1.11	IPv4	-
2.0.75.30	IPv4	-
2.0.2.19	IPv4	-
2.0.4.34	IPv4	-
2.0.1.24	IPv4	-
2.0.16.99	IPv4	-
2.0.22.41	IPv4	-
2.0.66.80	IPv4	-
2.0.12.74	IPv4	-
2.0.26.8	IPv4	-
2.0.46.62	IPv4	-
2.0.15.74	IPv4	-
2.1.54.67	IPv4	-
2.0.19.27	IPv4	-
2.0.34.15	IPv4	-
2.0.0.77	IPv4	-
2.0.14.23	IPv4	-
2.0.4.88	IPv4	-
2.0.8.10	IPv4	-
0.0.0.0	IPv4	-

Showing 1 to 74 of 80 rows

Rows per page:

3.7 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

This extension is dangerous and needs to be removed from the Chrome Web Store. It hijacked my Google search results and placed irrelevant results atop the actual results from Google. This is a dangerous extension and if you have it installed, your search results will almost more than likely get hijacked. This is a virus disguised as an adblocker. It installed itself to my Chrome browser without my knowledge, and I had to install Browser WatchDog to see if I could find the culprit. Then I found this extension was listed. When I removed the extension from Chrome, my results on Google went back to normal. The search results load like normal, but then the results disappear, and then irrelevant results are placed directly above the actual results from Google. I didn't realize it until it was too late. This happened while I was trying to recover a long-lost Gmail account. If you have this dangerous extension on your Chrome browser and/or have no knowledge of installing it, remove it immediately. This extension needs to be removed from the Chrome Web Store. A big, fat 1 star for sure.

FB3 Network·29 Jun 2022

tengo la extensión instalada en mi computadora y nada mas no bloquea los anuncio, fraude total.

Lゐ

lili ゐ·22 Feb 2022

Version History

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Browse and explore files within this extension package

You reached today's free scan limit (3/3 unique extensions).

Upgrade for full visibility.

Security Alert: Confirmed Malware

Ultimate Video Adblocker

Supported Languages

Extension Info & Metadata

Publisher Contextual Analysis

Chrome Web Store Metadata

About this extension

Analytics & Metrics

User Growth

Rating Count

Average Rating

Static Code Security Analysis

Extracted Data

Code Review Findings Summary Across 4 Versions8

Versions scanned

Files with findings

Extracted Indicators (URLs and IPs)

URLs

Contextual Analysis

User Reviews

Version History

Version-to-Version Code Diff

Code Diff

Extension Files

User Reviews

User Growth

Rating Count

Average Rating