Chrome Web Store

25Versions

23Code reviewed

No malware found

In code review (v6.2.1)

Our reviewer read version 6.2.1 — the most recent version we have reviewed — and found no malicious behaviour. The version shown here has not been individually reviewed yet.

What our analysis found

Unblock Youku, used by 1,000,000 people, showed no malicious code in Extension Auditor's review. Its permissions mean it can observe network requests. It comes from a trusted publisher and was last updated in September 2026.

The extension is a legitimate service that uses necessary permissions (proxy, webRequest, etc.) for its core functionality. All observed network communication destinations align with the publisher's domain () or Firebase (a well-known analytics SaaS). The CWS-disclosed data collection (PII and authentication information) covers the account-related data flows. Content scripts are limited to specific media sites for unblocking regional restrictions, matching the described purpose. No malicious code or unauthorized data exfiltration was found in the provided source files. The high risk-engine score is driven by permission sensitivity, not actual malicious behavior.

Unblock Youku Chrome extension security report

ID: pdnfnkhpgegpcingjbfihlkjeighnddk

Supported Languages

🇨🇳Chinese (Simplified)

🇹🇼Chinese (Traditional)

🇺🇸English

Extension Info & Metadata

Status

Active

Version

6.3.1

Size

1.75 MB

Rating

4.4/5

Reviews

26,318

Users

1,000,000

Type

Extension

Updated

Sep 11, 2026

Publisher Contextual Analysis

Trusted

Author: uku.im
Privacy: Privacy Policy
Help: Help Center
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes
Website: Visit

Extensions

Active

Obsolete

Listed

Unlisted

Users

1,000,000

Screenshots & videos

Install growth

User Growth

No data available

No user growth data available for this extension

Rating Count

No data available

No rating count data available for this extension

Average Rating

No data available

No rating data available for this extension

See plans

React Flow

Internal permhash`3d29d814be…`
No malicious matches

No other extension carries this fingerprint.

Permhash (Mandiant)`176b778b40…`
No malicious matches

No other extension carries this fingerprint.

Network indicators

303 URLs and 50 IP literals were extracted from this version.

Item	Type	Severity	Description
proxy	Permission	Critical	This permission allows the extension to control the browser's proxy settings. Rated Critical because it can route all traffic through potentially malicious proxies, enabling man-in-the-middle attacks and traffic monitoring.
declarativeNetRequestWithHostAccess	Permission	Critical	This permission combines network request modification with host permissions. Rated Critical because it can modify requests for specific domains, potentially targeting sensitive websites with precise attack rules.
webRequest	Permission	Critical	This permission enables the extension to monitor and analyze all web requests made by the browser. Rated Critical because it can observe all network traffic including sensitive data, track browsing behavior, and gather authentication tokens.
webRequestAuthProvider	Permission	Critical	This permission allows the extension to handle authentication requests and modify authentication headers. Rated Critical because it can intercept login credentials, session tokens, and modify authentication flows to compromise accounts.
http:///	Host	Critical	Broad host access — the extension can read/modify content on every website.
https:///	Host	Critical	Broad host access — the extension can read/modify content on every website.
browsingData	Permission	High	This permission clears browsing data, history, and redis. Rated High because it can destroy evidence of malicious activity, clear security logs, and modify browser state.
storage	Permission	Medium	This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
alarms	Permission	Low	This permission schedules periodic tasks. Rated Low because it can only trigger events at specified times without access to sensitive data.
sidePanel	Permission	Low	This permission adds custom panels to the browser interface. Rated Low because it only affects browser UI elements and cannot access page content.

Gain full insight into all external connections.

Upgrade for full visibility.

About this extension

Helps users access their web services while travelling outside mainland China.

Read the publisher’s full description

☂ If you have any questions or suggestions, please contact us at http://uku.im/feedback ✘ Our extension does not block or interfere any native ads on websites, so the advertisement incomes of the website owners or publishers will not be affected. ✘ Our extension and backend web services do not host any files or data infringing on the intellectual property rights of others. ✿ This extension is open-sourced at http://uku.im/github. Any contributions are welcome. ✱ Installing this software, you agree that this software is only for study purposes and its authors take no responsibilities for any consequences. ✱ 安装本程序代表您同意：本程序仅为交流学习之用，造成的任何后果与程序作者无关。

User reviews

1.2 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

完全沒法使用

eric cheng·5 Sept 2026

the addon does not work even after login. It does not connected with the account.

H Qi·29 Jul 2026

显示连线但没用

A.J阿君·2 Jul 2026

Extension files

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

URLs

303

IPv4

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found

No IP addresses found

Gain full insight into all external connections.

Upgrade for full visibility.

Version	Size	Verdict	Findings	Permhash
6.3.1 Latest	1.75 MB	Not scanned	—	176b778b405af3ac2e85f6b766e2ff438db788d9ce0cded7614cf596f0d3717d
6.3.0	1.75 MB	Not scanned	—	176b778b405af3ac2e85f6b766e2ff438db788d9ce0cded7614cf596f0d3717d
6.2.1	1.94 MB	No malware found	0	b559fee87aaccfa747c784497c2a92247009c0c25aa28920a98ea120f15e86e1
6.1.4	0.42 MB	No malware found	0	b559fee87aaccfa747c784497c2a92247009c0c25aa28920a98ea120f15e86e1
6.1.3	0.42 MB	No malware found	0	b559fee87aaccfa747c784497c2a92247009c0c25aa28920a98ea120f15e86e1
6.1.2	0.41 MB	No malware found	0	9cc5c1e7d2ebf1b06d3409f8e1edf2f1edd85f52ffb3a8af72db20f79d4b276e
6.1.0	0.41 MB	No malware found	0	b559fee87aaccfa747c784497c2a92247009c0c25aa28920a98ea120f15e86e1
6.0.9	0.40 MB	No malware found	0	b559fee87aaccfa747c784497c2a92247009c0c25aa28920a98ea120f15e86e1
6.0.7	0.57 MB	No malware found	0	b559fee87aaccfa747c784497c2a92247009c0c25aa28920a98ea120f15e86e1
6.0.6	0.40 MB	No malware found	0	b559fee87aaccfa747c784497c2a92247009c0c25aa28920a98ea120f15e86e1

Showing 1 to 10 of 30 rows

Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

Gain full insight into all external connections.

Upgrade for full visibility.

Popular in Workflow & Planning

Application Launcher For Drive (by Google)87,000,000 users
AdBlock — block ads across the web65,000,000 users
Chrome Remote Desktop38,000,000 users
Microsoft Single Sign On35,000,000 users
MetaMask14,000,000 users

No malware found

What our analysis found